Some users of our app report the password reset links are expired, some other users confirmed it worked after trying again a few days later.
I'm aware the reset token is single-use, so the email link goes to our page, with the reset link encoded as a param. Then there is a button on the page which navigates to it. (to avoid pre-fetching from email antivirus or similar)
Supabase gives you the tools, documentation, and community that makes managing databases, authentication, and backend infrastructure a lot less overwhelming.