Magic Link 403
Hi, so I'm a designer getting in probably beyond my depth 🙂
I've been prototping an app using Lovable and Supabase. This was all working great until this morning when I did the security audit and 'fixed' an issue with my database exposing the email field to the internet.
Now when I try to signin to my app, using a magic link I get stuck and don't get pat the loading screen. I've probably used over 100 lovable message credits trying to fix this, and am just going around in circles wasting further message credits.
Loveable has suggested I do the following, all of which have not fixed the issue:
- Change the site url in the database, to what is suggested
- Add Redirect URL
- Turn off Confirm Email
I'm starting to loose hope. Thankyou in advance.
#magiclink #authenticaion #403
7 Replies
@Boruet double check your auth settings in Supabase (SITE_URL, redirectTo, and email confirmation config) and test sign in with the Supabase Auth helpers; if it still fails, check browser console/network logs to see where the flow is breaking
Thanks for the super fast reply.
So in supabase I've adjusted SITE_URL to "https://94a7fa06-54f9-4dda-859a-1b937cd55324.lovableproject.com" as advised by Lovable
RedirectTo: I've added : "https://94a7fa06-54f9-4dda-859a-1b937cd55324.lovableproject.com" as advise by Lovable
email confirmation: I've turned this off, but is that the same as email confirmation config? I'm seeing this in the log for Auth (attached)
I'm quite sure how to check the browser console / network logs to see where the flow is breaking, so going to try and look at this bit now.
Thanks for the tips
Starting to think I might be best to delete the whole supabase side of things and start over. It was working so well until the security audit and can't seem to roll it back to this mornings version.
@Boruet it looks like the magic link is expiring or not matching your SITE_URL correctly if you’d like, send me a DM and I can take a closer look at your Supabase auth settings with you
Thankyou, I very much appreciate that. I've just rolled back the front end to what I had this first thing this morning.
It seems to now let me login. I was so sure this was a backend issue with supabase, but now seems like it was some kind of Lovable issue.
@Boruet glad to hear it’s working again! Sometimes those frontend configs with Lovable can be tricky. If you’d like, feel free to DM me anytime I can help double check your Supabase setup to make sure everything stays stable
Please stop asking folks to DM you on here. This is an open platform where user's help users in the open so that others can learn from it. You shouldn't be asking someone to DM you unless they themselves have requested so from you.
@Boruet here is the information I mentioned about email pre-fetching which sometimes cause the magic links to expire https://supabase.com/docs/guides/auth/auth-email-templates#email-prefetching