• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

supabase / auth
71%

Build:
DEFAULT BRANCH: master
Repo Added 27 Mar 2024 06:02AM UTC
Token 1T31V1W6OkCUSHigZiCz5dLEn3wnbRdrc regen
Build 1741 Last
Files 196
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: master
CHANGE BRANCH
x
Reset
Sync Branches
  • master
  • add-max-length-check-for-email
  • add-phone-number-in-sms-webhook
  • auth.resend-consistent-confirmation-flow
  • beng/fix-config
  • bewinxed/add-scim-v2
  • bewinxed/webauthn-persist-latest-attestation
  • bewinxed/webauthn-support
  • bo/docs/readme-code-syntax
  • bugfix/bootstrapping
  • cemal/add-checksums-to-release-notes
  • cemal/audit-log-stdout
  • cemal/audit-logs-prevent-only-writing-postgres
  • cemal/chore-blacksmith-runners
  • cemal/chore-parallel-builds
  • cemal/ci-fix-yaml-syntax-error
  • cemal/custom-oidc-cache-discovery
  • cemal/enhance-record-login-calls
  • cemal/facebook-limited-login-support
  • cemal/feat-add-oauth-authorize-endpoint
  • cemal/feat-add-oauth-client-type
  • cemal/feat-add-oauth-client-update-endpoint
  • cemal/feat-add-oauth-consent-list-and-revoke
  • cemal/feat-add-oauth-scopes-for-oidc
  • cemal/feat-add-oauth-token-endpoint
  • cemal/feat-add-oidc-provider-cache
  • cemal/feat-add-oidc-support
  • cemal/feat-add-pagination-oauth-clients-list
  • cemal/feat-add-regenerate-client-secret
  • cemal/feat-add-well-known-oauth-auth-server
  • cemal/feat-authorization-ttl-envvar
  • cemal/feat-custom-claims-for-custom-providers
  • cemal/feat-custom-oauth-oidc-providers
  • cemal/feat-db-cache-for-custom-oidc-providers
  • cemal/feat-enable-custom-providers-by-default
  • cemal/feat-enhance-url-check-issuer
  • cemal/feat-facebook-limited-login-skip-nonce-check
  • cemal/feat-loose-amr-claim-check
  • cemal/feat-oauth-client-for-supabase
  • cemal/feat-oauth2-return-redirect-url
  • cemal/feat-prefix-for-migration-queries
  • cemal/feat-redirect-url-v2
  • cemal/feat-remove-client-id-column-oauth-clients
  • cemal/feat-saml-key-rotation
  • cemal/feat-supabase-auth-identifier-oauth-redirects-auth-919
  • cemal/feat-support-custom-discovery-urls
  • cemal/feat-support-multiple-aud
  • cemal/feat-update-docker-compose-dev
  • cemal/feat-update-oauth-client-list-response
  • cemal/feat-update-openapi
  • cemal/fix-404-as-json-response
  • cemal/fix-add-issuer-validator
  • cemal/fix-add-missing-param
  • cemal/fix-info-log-on-http-server-close
  • cemal/fix-makefile
  • cemal/fix-migration-version
  • cemal/fix-oauth-client-redirect-uri-validation
  • cemal/fix-oauth2-referer-check
  • cemal/fix-oidc-issuer-strip-slash
  • cemal/fix-openapi
  • cemal/fix-provider-info-signup-audit
  • cemal/fix-token-auth-endpoint-method-update
  • cemal/oauth-provider-client
  • cemal/refactor-token-service
  • cemal/revert-reset
  • chore-fix-link-to-netlify-gotrue
  • chore/harden-runners
  • chore/ip-tracking-cleanup
  • chore/metric-tags
  • chore/prodsec-89
  • chore/testing
  • chore/update-workflow-check-commits
  • ci/openapi-lint
  • cleanup-ci
  • codex/add-passkey-support-to-supabase
  • cs/api-db-access
  • cs/api-errorcodes-refactor
  • cs/auth-sso-resource-id-support
  • cs/background-template-reloading
  • cs/background-template-reloading-p2
  • cs/background-template-reloading-p3
  • cs/bug-fix-send-email-hook
  • cs/bump-go-1.25.5
  • cs/chore-apitask-tests
  • cs/chore-gosec-fixes
  • cs/conf-coverage
  • cs/conf-json-parsing
  • cs/crypto-generate-otp-tests
  • cs/e2e
  • cs/e2e-tests-phone-confirm-and-change
  • cs/error-code-metrics
  • cs/feat-add-after-user-created-hook
  • cs/feat-background-workers
  • cs/feat-config-reloader
  • cs/feat-config-reloads-poller
  • cs/feat-email-and-sms-rate-limiting
  • cs/feat-mailer-cleanup-p1
  • cs/feat-mailer-logging
  • cs/feat-makefile-qol
  • cs/feat-makefile-update
  • cs/feat-percentage-based-db-conn-limits
  • cs/feat-pkg-envparse
  • cs/feat-rate-limiter-persistence
  • cs/feat-ratelimit-reloads
  • cs/feat-test-failfast
  • cs/feat-tools-dir
  • cs/feat-tools-dir-vulncheck-fix
  • cs/feat-validate-email-address
  • cs/feat-version-metric
  • cs/feat-version-metric-errors
  • cs/fix-build-system
  • cs/fix-ctx-server-errors
  • cs/fix-dockerfile
  • cs/fix-rate-limit-zero-value-test
  • cs/fix-release-workflow
  • cs/fix-respect-rate-limit-zero
  • cs/fix-version-empty
  • cs/hooks-add-metdata
  • cs/hooks-content-negotiation-fix
  • cs/hooks-errors-fix
  • cs/hooks-p1
  • cs/hooks-p2
  • cs/hooks-p3
  • cs/hooks-p4
  • cs/hooks-pr5-opt1
  • cs/hooks-pr5-opt2
  • cs/hooks-refactor-apierrors
  • cs/hooks-test-coverage
  • cs/invite-fix
  • cs/json-config
  • cs/mailer-refactor-p1
  • cs/master-fix-missing-error-propagation
  • cs/maxconn-fix-1
  • cs/migrations-fix-for-add-mfa
  • cs/pr-2497-fix
  • cs/rate-limit-otp-clarity
  • cs/rate-limit-refactor
  • cs/reduce-artifact-sizes
  • cs/reload-coverage
  • cs/reloader-allow-invalid-config-dir
  • cs/reloader-unittest-race-fix
  • cs/remove-template-prefetch
  • cs/revert-1974
  • cs/template-cache-warmup
  • cs/update-email-validation
  • cs/update-godotenv
  • cs/v1hooks
  • da/fix-release
  • dependabot/go_modules/github.com/consensys/gnark-crypto-0.18.1
  • dependabot/go_modules/github.com/ethereum/go-ethereum-1.16.8
  • dependabot/go_modules/github.com/getkin/kin-openapi-0.131.0
  • dependabot/go_modules/github.com/go-chi/chi/v5-5.2.2
  • dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.4
  • dependabot/go_modules/github.com/golang-jwt/jwt/v4-4.5.1
  • dependabot/go_modules/github.com/golang-jwt/jwt/v4-4.5.2
  • dependabot/go_modules/github.com/golang-jwt/jwt/v5-5.2.2
  • dependabot/go_modules/github.com/rs/cors-1.11.0
  • dependabot/go_modules/go_modules-03c8d65c28
  • dependabot/go_modules/go_modules-c0992384b1
  • dependabot/go_modules/go_modules-d07b0ecb09
  • dependabot/go_modules/go_modules-f8d2715201
  • dependabot/go_modules/golang.org/x/crypto-0.31.0
  • dependabot/go_modules/golang.org/x/net-0.23.0
  • dependabot/go_modules/golang.org/x/net-0.36.0
  • dependabot/go_modules/golang.org/x/net-0.38.0
  • dependabot/go_modules/golang.org/x/oauth2-0.27.0
  • depthfirst_ca0b1547f77f5261458a6e91ca2ccb2c0e907ca7_51bc5a6e525fb336543098af32316e68
  • depthfirst_effd66245bd981ba5a07aa6b7441ad37578f9b73_c9fe0adfec1c4c0e63a2388cdc8d50a6
  • development
  • dnywh/auth-email-health-default-copy
  • docs-1710-verify-type-options
  • docs-anon-login-configs
  • docs/documentation-cleanup
  • docs/prodsec-104
  • docs/remove-unused-env-var
  • esinx-naver-provider
  • etienne/cors-allowed-origins
  • etienne/current_password_check_recovery
  • etienne/prodsec-126-ardvark-auth-03
  • etienne/prodsec-189
  • etienne/prodsec-76
  • etienne/prodsec-97-auth-sup-02-012
  • etienne/prodsec-99-auth-sup-02-014
  • etienne/sec-666-pin-all-github-actions-to-full-commit-sha
  • feat-slack-oauth-v2
  • feat/add-email-metrics
  • feat/alphanumeric-otp
  • feat/client-ip-forwarding
  • feat/comma-separated-header-keys
  • feat/cursor-mcp-oauth-support
  • feat/min-jwt
  • feat/mx-blocklist
  • feat/solana-ledger
  • feat/token-endpoint-auth-method-enforcement
  • feat_docker_compose_and_go
  • feature/snapchat-oauth
  • figma-auth
  • fix--oauth-redirect-parsing
  • fix-binary-name
  • fix-contributing-md
  • fix-magiclink-requiredchars
  • fix/firebase-scrypt-base64-encoding
  • fix/notification-templates-siteurl
  • fix/oauth-token-endpoint-auth-method
  • fix/otp-signup-respects-min-password-length
  • fix/redirect-url-empty-authority
  • fix/update-sanitize-signup
  • fix/valid-methods-parsing
  • fix_contributing_typo
  • fixups
  • fm/add-darwin-arm64-build-target
  • fm/auth-1101-passkeys-discoverable-credentials
  • fm/auth-1102-passkeys-management-endpoints
  • fm/auth-1104-pk-admin-endpts
  • fm/auth-1106-aaguid-friendly-name
  • fm/auth-1111-passkeys-captcha-on-auth
  • fm/auth-1112-pk-auth-rl
  • fm/auth-1154-oriole-tests
  • fm/auth-1155-identities-ordering
  • fm/auth-1156-order-independent-tests-sso-providers
  • fm/auth-1157-skip-index-worker-on-oriole
  • fm/auth-1227
  • fm/auth-1228-delete-pk-on-soft-delete
  • fm/auth-969-state-param
  • fm/auth-982
  • fm/bump-deps
  • fm/bump-go-1.25.10
  • fm/bump-go-1.25.11
  • fm/bump-webauthn-lib-version
  • fm/fix-flaky-idx-worker-test
  • fm/fix-go-sec-errors
  • fm/fix-govuln-issues
  • fm/gosec-fixes
  • fm/index-worker-threshold-config
  • fm/multigres-tests
  • fm/passkey-api-req-res-cleanup
  • fm/passkeys
  • fm/pin-oriole
  • fm/prodsec-103
  • fm/prodsec-69-mfa-webauthn-config
  • fm/prodsec-88
  • fm/use-truncate-to-avoid-index-corruption
  • fm/warn-on-invalid-webauthn-config
  • hf/aao-in-send-email
  • hf/add-audit-log-disable-postgres
  • hf/add-authorized-email-addresses
  • hf/add-aws-kms-rs256
  • hf/add-azure-ciam
  • hf/add-exhaustive
  • hf/add-headers-to-issue-refresh-token
  • hf/add-magic-link-disable-toggle
  • hf/add-max-idle-time
  • hf/add-one-time-tokens
  • hf/add-support-for-argon2
  • hf/adjust-required-claims-in-auth-hooks
  • hf/artifact-bucket
  • hf/azure-overage-include-api-version
  • hf/bump-saml-0-5-1
  • hf/captcha-parsing-fix
  • hf/change-s3-role
  • hf/chore-fix-gha-perms
  • hf/chore-release-as-2-165-2
  • hf/ci-alpine-3
  • hf/ci-dogofooding-checks-on-release
  • hf/ci-fast-release-tarball
  • hf/ci-fix-binary-version-docker
  • hf/ci-fix-coverage-metering
  • hf/ci-fix-dogfooding
  • hf/ci-fix-dogfooding-take-2
  • hf/clean-up-master
  • hf/cover-crypto-100
  • hf/db-advisor
  • hf/email-less-accounts-with-oauth
  • hf/email-rate-limiting-new-config
  • hf/encrypt-sensitive-columns
  • hf/encrypted-password-pointer
  • hf/experimental-provider-linking-domains
  • hf/external-host-validation
  • hf/fail-empty-address
  • hf/fallback-to-jwt-secret-if-unknown-kid
  • hf/feat-bump-new-version
  • hf/feat-embedded-migrations
  • hf/fix-apple-oidc-issuer-change
  • hf/fix-argon2
  • hf/fix-authenticate-empty-string
  • hf/fix-azure-large-groups
  • hf/fix-claim-overages-json-azure
  • hf/fix-coveralls-image
  • hf/fix-custom-sms-twilio-verify
  • hf/fix-expose-x-supabase-api-version-header-in-cors
  • hf/fix-gosec-siwe
  • hf/fix-id-token-permission
  • hf/fix-idempotent-logout
  • hf/fix-identity-email-verified
  • hf/fix-invalid-url-thing
  • hf/fix-local-dockerfile
  • hf/fix-mail-headers
  • hf/fix-mfa-config-backward-compatibility
  • hf/fix-mfa-verify-rt-v2
  • hf/fix-new-oidc-provider-apple
  • hf/fix-redirect-empty-hostname
  • hf/fix-redirect-ip-address
  • hf/fix-secret-api-key-ignore-aud-claim
  • hf/fix-session-upgrade-percentage
  • hf/fix-solana-localhost
  • hf/fix-strip-version
  • hf/fix-supafast
  • hf/fix-timeout-writer
  • hf/fix-write-header
  • hf/fix-write-header-deadlock
  • hf/gomft
  • hf/hook-log
  • hf/inline-mailme
  • hf/limit-low-aal-sessions
  • hf/link-identity-oidc
  • hf/log-json-error-response
  • hf/mail-headers
  • hf/merge-metadata
  • hf/mfa-rt-2-counter-2
  • hf/more-fix-rt-2
  • hf/move-email-sms-send-out-of-update-user-transaction
  • hf/new-rt
  • hf/openid-configuration
  • hf/phase-ii-ott
  • hf/redirect-url-fragment
  • hf/remove-data-migrations
  • hf/revert-azure-claim-overages
  • hf/saml-array-values
  • hf/saml-encrypted-assertions
  • hf/saml-specific-external-url
  • hf/separate-web3-rate-limits-from-other-token
  • hf/skip-apple-issuer-check-oidc
  • hf/snap
  • hf/split-words-audit-log
  • hf/supafast-tarball
  • hf/support-apple-transfer-sub
  • hf/test-release
  • hf/try-to-run-release-please-again
  • hf/ubuntu-latest
  • hf/upgrade-refresh-tokens-v2
  • hf/upload-artifacts-to-s3
  • hf/use-redirect-url
  • hf/vercel-global-user-id
  • hf/x-sb-error-code
  • iat/align-notifications-defaults
  • iat/async-index-creation
  • iat/auth-840-phone-number-changed-notification
  • iat/auth-841-identity-linked-notifications
  • iat/auth-842-email-send-hooks-for-notifications
  • iat/auth-906-auth-trgm
  • iat/auth-916-remove-text-pattern-ops-idx
  • iat/auth-954-remove-trgm-ext
  • iat/bump-go-version-docker
  • iat/email-changed-notification
  • iat/idx-worker-structured-logging
  • iat/mfa-enrollment-notifications
  • iat/password-changed-notification
  • iat/remove-create-extension-pg-trgm
  • iat/x-provider
  • j0/accurately_affect_max_frequency_limit
  • j0/add_additional_info_around_mime_type_error
  • j0/add_context_to_load_factor
  • j0/add_custom_email_sender_hook
  • j0/add_has_factor_claim
  • j0/add_hook_trigger_logic
  • j0/add_last_challenged_at
  • j0/add_mfa_phone_openapi_spec
  • j0/add_mfa_sms
  • j0/add_scrypt_password_hash
  • j0/add_timeout_middleware
  • j0/add_token_for_non_secure_email_change
  • j0/add_twilio_verify_support_for_mfa_phone
  • j0/add_webauthn
  • j0/add_webauthn_config
  • j0/adjust_mfa_status_codes
  • j0/allow_kong_and_edge_functions
  • j0/allow_only_one_phone_factor
  • j0/allow_postgres_and_http_on_extensibility_point
  • j0/backport_auth_namespace_to_enums
  • j0/change_mfa_error_code
  • j0/check_for_phone_identity_on_phone_chang
  • j0/custom_email_hook
  • j0/deprecate_mfa_enabled_config
  • j0/drop_uniqueness_constraint_on_mfa_phone
  • j0/fido2_authenticator_challenge_verify_model
  • j0/fix_email_change_with_phone_auth
  • j0/fix_migration_idempotent_phone_cnfig
  • j0/fix_rc_duplicate_identifier
  • j0/fixes_while_testing
  • j0/forbid_access_token_issuance_without_session
  • j0/hide_hook_name
  • j0/merge_aal_and_amr_update
  • j0/mfa_refactor_load_factor
  • j0/minor_speling_error
  • j0/move_totp_mfa_to_dedicated_fn
  • j0/move_verification_into_mailer_package
  • j0/patch_secure_email_change
  • j0/phone_mfa_refactors
  • j0/prevent_panic_on_email_change
  • j0/publish_to_ghcr
  • j0/refactor_generate_access_token
  • j0/refactor_generate_access_token_to_accept_request
  • j0/remove_deprecated_code
  • j0/remove_find_factors_by_user
  • j0/remove_find_session_by_id
  • j0/remove_set_cookie_tokens
  • j0/remove_totp_field_for_phone_response
  • j0/rename_to_send_sms
  • j0/require_appropriate_aal_for_pw_update
  • j0/return_factor_type_in_challenge
  • j0/send_over_user_in_send_sms_hook
  • j0/update_auth_functions
  • j0/update_error_code_id_token
  • j0/update_hook_schema
  • j0/update_mfa_error_message
  • j0/update_openapi_schema
  • j0/update_openapi_spec
  • j0/update_phone_admin_methods
  • j0/upgrade-contrib-docs
  • j0/upgrade_go_version
  • j0/upgrade_otel_deps
  • j0/validate_send_email
  • j0/webauthn_fixes
  • janek/signup-identities-email-verified
  • km/add-error-codes
  • km/add-error-codes-password-login
  • km/add-ip-based-limits
  • km/add-saml-tests
  • km/alter-auth-uid
  • km/bump-alpine-go
  • km/check-empty-aud
  • km/chore-remove-unused-hook-outputs
  • km/cleanup-anonymous-users
  • km/feat-asymmetric-jwt-support
  • km/fix-admin-update-user
  • km/fix-amr-mfa
  • km/fix-anonymous-user-linking
  • km/fix-attribute-mapping
  • km/fix-auth-hook-error
  • km/fix-auth-hooks
  • km/fix-authorized-emails
  • km/fix-authorized-middleware-check
  • km/fix-cleanup-logging
  • km/fix-context-cancellation
  • km/fix-custom-sms-hook-config
  • km/fix-email-verified
  • km/fix-enable-rls
  • km/fix-external-state
  • km/fix-figma
  • km/fix-ignore-rate-limits-for-autoconfirm
  • km/fix-improve-session-error
  • km/fix-jwt
  • km/fix-linkedin-oidc-issuer
  • km/fix-logging
  • km/fix-mailer-config
  • km/fix-max-password-length-error
  • km/fix-mfa-factors-index
  • km/fix-panic-logout
  • km/fix-panic-refresh-token
  • km/fix-pkce-verify-post
  • km/fix-rate-limit-log-level
  • km/fix-return-error-code
  • km/fix-saml-assertion
  • km/fix-search-path
  • km/fix-serve
  • km/fix-shared-limiter
  • km/fix-signup-generate-link
  • km/fix-signup-verify
  • km/fix-timeout-write-header
  • km/fix-update-attribute-mapping
  • km/fix-update-phone
  • km/fix-update-user
  • km/fix-update-user-email
  • km/fix-update-user-phone-change
  • km/fix-use-factor-id
  • km/format-test-otps
  • km/hotfix-jwt-aud
  • km/improve-logging
  • km/improve-mfa-verify-logs
  • km/improve-saml-logging
  • km/improve-token-oidc-logging
  • km/inactivity-session-bug
  • km/normalise-emails
  • km/phase-iii-ott
  • km/redirect-invalid-state
  • km/ref-retrieve-request-params
  • km/remove-unused-args
  • km/return-identity
  • km/return-session-not-found-error
  • km/update-admin-create-user
  • km/update-chi-version
  • km/update-ci
  • km/update-error-message
  • km/update-golang-jwt
  • km/update-mailme
  • km/update-oapi
  • km/v2.157.1
  • line-oidc
  • oidc-iss-checks
  • omerhochman/fix-linkedin-iodc-error
  • optional_2fa
  • or/bearer_ci
  • or/fallback-on-btree-when-hash-unavailable
  • or/query_reduction
  • or/test-twitter-oauth
  • patch-1
  • push-wnvwkqmwrrtk
  • refs/tags/rc2.170.0-rc.10
  • refs/tags/v2.186.0
  • refs/tags/v2.187.0
  • refs/tags/v2.188.1
  • refs/tags/v2.190.0
  • release-please--branches--cs/test-release-please
  • release-please--branches--master
  • release/2.165.0
  • remove-instance-id-queries
  • remove-redundant-method-hookuri-param
  • revert-1534-omerhochman/fix-linkedin-iodc-error
  • revert-1616-km/alter-auth-uid
  • revert-1812-hf/artifact-bucket
  • revert-1856-or/fallback-on-btree-when-hash-unavailable
  • revert-1858-revert-1856-or/fallback-on-btree-when-hash-unavailable
  • revert-2239-iat/async-index-creation
  • sam/packaged-auth
  • scim
  • sec-601-password-change-function
  • simplify-request-tracing-middleware-setup-logic
  • single-source-of-truth-for-waitforcleanup
  • siwe-implementation
  • snyk-fix-0720ecd3bfe1e766e52214a3bbab15f5
  • timkendrick/fix-saml-client-entity-id
  • tom/amd64x2
  • update-docker-container-name
  • update-md-for-resend-endpont
  • upgrade-github-actions-node24
  • upgrade-github-actions-node24-general
  • vercel-marketplace-oidc

17 Jun 2026 10:28PM UTC coverage: 71.072% (-0.2%) from 71.274%
27723819102

push

github

web-flow
feat: add RS256 signing keys backed by AWS KMS (#2571)

Adds support for RSA signing keys backed by AWS KMS, which are the
cheapest type of key.

You specify `aws:kms:arn` as a claim in the private key's JWK and it all
flows from there. It uses the ambient credentials of the process to talk
to KMS.

---------

Co-authored-by: Chris Stockton <chris.stockton@supabase.io>

31 of 113 new or added lines in 6 files covered. (27.43%)

58 existing lines in 5 files now uncovered.

17832 of 25090 relevant lines covered (71.07%)

665.68 hits per line

Relevant lines Covered
Build:
Build:
25090 RELEVANT LINES 17832 COVERED LINES
665.68 HITS PER LINE
Source Files on master
  • Tree
  • List 196
  • Changed 7
  • Source Changed 0
  • Coverage Changed 7
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
27723819102 master feat: add RS256 signing keys backed by AWS KMS (#2571) Adds support for RSA signing keys backed by AWS KMS, which are the cheapest type of key. You specify `aws:kms:arn` as a claim in the private key's JWK and it all flows from there. It uses th... push 17 Jun 2026 10:34PM UTC web-flow github
71.07
27700358872 master chore(conf): do not halt startup for non-essential config fields (#2572) This wraps some non-essential fields that would previously halt the startup of the auth server when Validate() failed with a cachedValue. This cached value holds the origina... push 17 Jun 2026 03:34PM UTC web-flow github
71.27
27550769266 master chore(master): release 2.190.0 (#2514) :robot: I have created a release *beep* *boop* --- ## [2.190.0](https://github.com/supabase/auth/compare/v2.189.0...v2.190.0) (2026-06-11) ### Features * add -failfast to make test command ([#2553](http... push 15 Jun 2026 01:52PM UTC web-flow github
71.24
27373392588 master feat(custom-oidc): support non-standard discovery URLs (#2573) ## What kind of change does this PR introduce? Feature ## What is the current behavior? `discoveryUrl` is only validated during provider creation (admin endpoint) ## What is the n... push 11 Jun 2026 07:57PM UTC web-flow github
71.24
27144118166 master fix(custom-oidc): strip trailing slashes from issuer (#2570) ## What kind of change does this PR introduce? Bug fix ## summary Fixes `GetDiscoveryURL` constructing a malformed URL (e.g. `https://example.com//.well-known/openid-configuration`) w... push 08 Jun 2026 02:24PM UTC web-flow github
71.13
27142563498 master fix: check session state for admin tokens (#2555) ## What kind of change does this PR introduce? Bug fix ## What is the current behavior? Middleware validates the session token has not expired. ## What is the new behavior? Validates the toke... push 08 Jun 2026 01:59PM UTC web-flow github
71.13
27019183324 master fix(Dockerfile): ensure forks exists on fs before make deps (#2567) Release action is [failing](https://github.com/supabase/auth/actions/runs/27016942895/job/79738663274) due to the Dockerfile calling make deps before the source for the replace d... push 05 Jun 2026 02:01PM UTC web-flow github
71.11
27016942521 master feat(conf): add JSON config file support (#2540) Adds two new replace directives to `go.mod` which point to the newly created `internal/forks` directory: * `github.com/joho/godotenv` => `./internal/forks/godotenv` * `github.com/kelseyhightower/en... push 05 Jun 2026 01:20PM UTC web-flow github
71.11
27007899175 master fix(passkeys): enforce AAL checks on passkey registration and deletion (#2565) If a user has a verified MFA factor enrolled, then enforce AAL2 for passkey registration and deletion. Note: we explicitly do not gate the passkey update operation si... push 05 Jun 2026 09:51AM UTC web-flow github
70.99
26957576189 master fix(passkeys): delete webauthn creds when user is soft-deleted (#2564) Delete WebAuthn credentials when a user is soft deleted to prevent authentication. push 04 Jun 2026 02:21PM UTC web-flow github
70.96
See All Builds (1740)

Badge your Repo: auth

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc