SupabaseS
Supabase•11mo ago
WreckNoFear

Password reset not working on mobile

Hi, I'm using supabase reset password for email. If I click the link sent in the email on my desktop (I've tested with Gmail web and Outlook app), it redirects as its supposed to and works with no issue. If I click this link on my iPhone, (I've tested using default Mail app and Gmail app) I get sent to my /auth/error page which will only happen if there is no code returned from this link or if an error occurs (I'm using the default provided supabase route handler as below).

    const { error } = await supabase.auth.resetPasswordForEmail(data.email, {
      redirectTo: process.env.NEXT_PUBLIC_URL + '/auth/callback/provider?next=/auth/reset-password',
    });


/auth/callback/provider route handler:
export async function GET(request: Request) {
  const { searchParams, origin } = new URL(request.url);
  const code = searchParams.get('code');
  const next = searchParams.get('next') ?? '/';

  if (code) {
    const supabase = await createSupabaseServerClient();
    const { error } = await supabase.auth.exchangeCodeForSession(code);

    if (!error) {
      const forwardedHost = request.headers.get('x-forwarded-host');
      const isLocalEnv = process.env.NODE_ENV === 'development';
      if (isLocalEnv) {
        return NextResponse.redirect(`${origin}${next}`);
      } else if (forwardedHost) {
        return NextResponse.redirect(`https://${forwardedHost}${next}`);
      } else {
        return NextResponse.redirect(`${origin}${next}`);
      }
    }
  }
  return NextResponse.redirect(`${origin}/auth/error`);
}


Sometimes I can see this error appearing in the URL:
#error=access_denied&error_code=otp_expired&error_description=Email+link+is+invalid+or+has+expired

I just don't understand why it works on desktop and not on mobile. Any help appreciated.
Was this page helpful?