Skip to content

fix: set cookies for password recovery event#32

Merged
J0 merged 1 commit into
supabase:mainfrom
j4w8n:fix-set-cookies-for-password-recovery-event
Jul 3, 2024
Merged

fix: set cookies for password recovery event#32
J0 merged 1 commit into
supabase:mainfrom
j4w8n:fix-set-cookies-for-password-recovery-event

Conversation

@j4w8n
Copy link
Copy Markdown
Contributor

@j4w8n j4w8n commented Jul 3, 2024

What kind of change does this PR introduce?

Bug fix

What is the current behavior?

When resetting a user's password with an email template which has a URL defining the type value as recovery, and using the verifyOtp method to process the token_hash and type, the SSR server client's onAuthStateChange function does not recognize the PASSWORD_RECOVERY event that verifyOtp fires. This prevents the code here from running; resulting in the new session not being saved to cookies, and the user is not considered logged in.

Fixes #21

What is the new behavior?

User is logged in.

Additional context

Replaces PR #24

@J0 J0 force-pushed the fix-set-cookies-for-password-recovery-event branch from 7501201 to d2d71c8 Compare July 3, 2024 18:40
@J0 J0 marked this pull request as draft July 3, 2024 18:41
@J0 J0 marked this pull request as ready for review July 3, 2024 18:41
@J0 J0 merged commit 7dc1837 into supabase:main Jul 3, 2024
@J0
Copy link
Copy Markdown
Contributor

J0 commented Jul 3, 2024

Thank you!

hf pushed a commit that referenced this pull request Aug 19, 2024
🤖 I have created a release *beep* *boop*
---


## [0.5.0](v0.4.0...v0.5.0)
(2024-08-19)


### Features

* update CI so it runs on release as well
([#33](#33))
([4517996](4517996))


### Bug Fixes

* re-apply update CI so it runs on release as well
([#49](#49))
([51d5a43](51d5a43))
* revert "update CI so it runs on release as well"
([#44](#44))
([9d0e859](9d0e859))
* set cookies for password recovery event
([#32](#32))
([7dc1837](7dc1837))
* set cookies when mfa challenge is verified
([#27](#27))
([c217f53](c217f53))
* update conventional commits ci to use main instead of master
([#31](#31))
([bebce89](bebce89))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Password Recovery Does Not Update Auth Session

3 participants