auth api logs contain many 429 errors

kirk · 2025-12-10T20:44:46.190Z

i am debugging the issue mentioned here: https://discord.com/channels/839993398554656828/1448211202697203712 and when checking the auth api logs, i see many 429 errors, including the error below. more context on my auth setup is in the other thread, but i don't see any reason that it would cause 429 errors. do i need to increase the capacity of my db to handle these requests?

K

kirkOP•12/10/25, 8:45 PM

{
  "id": "3c9207ba-151f-4bcb-a784-a5e7bfbbc0b4",
  "metadata": [
    {
      "host": "db-hyeddbbdplkkwyokzqyl",
      "limit_conn_max_idle_time": null,
      "component": "api",
      "_SYSTEMD_CGROUP": null,
      "grant_type": "refresh_token",
      "request_id": "9abdc9e2855289f0-BOM",
      "mail_from": null,
      "message": null,
      "_SOURCE_REALTIME_TIMESTAMP": null,
      "PRIORITY": null,
      "_AUDIT_LOGINUID": null,
      "signal_enabled": null,
      "panic": null,
      "metering": null,
      "UNIT": null,
      "event": null,

{
  "id": "3c9207ba-151f-4bcb-a784-a5e7bfbbc0b4",
  "metadata": [
    {
      "host": "db-hyeddbbdplkkwyokzqyl",
      "limit_conn_max_idle_time": null,
      "component": "api",
      "_SYSTEMD_CGROUP": null,
      "grant_type": "refresh_token",
      "request_id": "9abdc9e2855289f0-BOM",
      "mail_from": null,
      "message": null,
      "_SOURCE_REALTIME_TIMESTAMP": null,
      "PRIORITY": null,
      "_AUDIT_LOGINUID": null,
      "signal_enabled": null,
      "panic": null,
      "metering": null,
      "UNIT": null,
      "event": null,

{
  "id": "3c9207ba-151f-4bcb-a784-a5e7bfbbc0b4",
  "metadata": [
    {
      "host": "db-hyeddbbdplkkwyokzqyl",
      "limit_conn_max_idle_time": null,
      "component": "api",
      "_SYSTEMD_CGROUP": null,
      "grant_type": "refresh_token",
      "request_id": "9abdc9e2855289f0-BOM",
      "mail_from": null,
      "message": null,
      "_SOURCE_REALTIME_TIMESTAMP": null,
      "PRIORITY": null,
      "_AUDIT_LOGINUID": null,
      "signal_enabled": null,
      "panic": null,
      "metering": null,
      "UNIT": null,
      "event": null,

{
  "id": "3c9207ba-151f-4bcb-a784-a5e7bfbbc0b4",
  "metadata": [
    {
      "host": "db-hyeddbbdplkkwyokzqyl",
      "limit_conn_max_idle_time": null,
      "component": "api",
      "_SYSTEMD_CGROUP": null,
      "grant_type": "refresh_token",
      "request_id": "9abdc9e2855289f0-BOM",
      "mail_from": null,
      "message": null,
      "_SOURCE_REALTIME_TIMESTAMP": null,
      "PRIORITY": null,
      "_AUDIT_LOGINUID": null,
      "signal_enabled": null,
      "panic": null,
      "metering": null,
      "UNIT": null,
      "event": null,

K

kirkOP•12/10/25, 8:46 PM

      "SYSLOG_FACILITY": null,
      "msg": "429: Request rate limit reached",
      "mail_type": null,
      "grace_period_duration": null,
      "EXECUTABLE": null,
      "config_conn_max_lifetime": null,
      "user_id": null,
      "_CMDLINE": null,
      "action": null,
      "notify_enabled": null,
      "poller_interval": null,
      "auth_event": [],
      "signal_number": null,
      "level": "warning",
      "_PID": null,
      "path": "/token",
      "duration": null,
      "_COMM": null,
      "config_max_pool_size": null,
      "sso_provider_id": null,
      "header": null,
      "_MACHINE_ID": null,
      "web3_domain": null,
      "login_method": null,
      "limit_strategy": null,
      "_STREAM_ID": null,
      "long_wait_duration_samples": null,
      "config_conn_max_idle_time": null,
      "source_type": null,
      "_LINE_BREAK": null,
      "web3_address": null,
      "_EXE": null,
      "_AUDIT_SESSION": null,
      "_TRANSPORT": null,
      "x_forwarded_proto": null,
      "time": null,
      "mail_to": null,
      "_GID": null,
      "stack": null,
      "x_forwarded_host": null,
      "limit_conn_max_lifetime": null,
      "saml_entity_id": null,
      "worker_type": null,
      "poller_enabled": null,
      "status": null,
      "_UID": null,
      "valid_until": null,
      "web3_uri": null,
      "method": "POST",
      "limit_max_idle_conns": null,
      "CODE_FILE": null,
      "remote_addr": "103.251.58.137",
      "provider": null,
      "_SYSTEMD_UNIT": null,
      "issuer": null,
      "error": "429: Request rate limit reached",
      "limit_max_open_conns": null,
      "client_id": null,
      "config_conn_percentage": null,
      "MESSAGE_ID": null,
      "url": null,
      "referer": "https://www.example.com",
      "_SYSTEMD_INVOCATION_ID": null,
      "CODE_FUNC": null,
      "_BOOT_ID": null,

      "SYSLOG_FACILITY": null,
      "msg": "429: Request rate limit reached",
      "mail_type": null,
      "grace_period_duration": null,
      "EXECUTABLE": null,
      "config_conn_max_lifetime": null,
      "user_id": null,
      "_CMDLINE": null,
      "action": null,
      "notify_enabled": null,
      "poller_interval": null,
      "auth_event": [],
      "signal_number": null,
      "level": "warning",
      "_PID": null,
      "path": "/token",
      "duration": null,
      "_COMM": null,
      "config_max_pool_size": null,
      "sso_provider_id": null,
      "header": null,
      "_MACHINE_ID": null,
      "web3_domain": null,
      "login_method": null,
      "limit_strategy": null,
      "_STREAM_ID": null,
      "long_wait_duration_samples": null,
      "config_conn_max_idle_time": null,
      "source_type": null,
      "_LINE_BREAK": null,
      "web3_address": null,
      "_EXE": null,
      "_AUDIT_SESSION": null,
      "_TRANSPORT": null,
      "x_forwarded_proto": null,
      "time": null,
      "mail_to": null,
      "_GID": null,
      "stack": null,
      "x_forwarded_host": null,
      "limit_conn_max_lifetime": null,
      "saml_entity_id": null,
      "worker_type": null,
      "poller_enabled": null,
      "status": null,
      "_UID": null,
      "valid_until": null,
      "web3_uri": null,
      "method": "POST",
      "limit_max_idle_conns": null,
      "CODE_FILE": null,
      "remote_addr": "103.251.58.137",
      "provider": null,
      "_SYSTEMD_UNIT": null,
      "issuer": null,
      "error": "429: Request rate limit reached",
      "limit_max_open_conns": null,
      "client_id": null,
      "config_conn_percentage": null,
      "MESSAGE_ID": null,
      "url": null,
      "referer": "https://www.example.com",
      "_SYSTEMD_INVOCATION_ID": null,
      "CODE_FUNC": null,
      "_BOOT_ID": null,

      "SYSLOG_FACILITY": null,
      "msg": "429: Request rate limit reached",
      "mail_type": null,
      "grace_period_duration": null,
      "EXECUTABLE": null,
      "config_conn_max_lifetime": null,
      "user_id": null,
      "_CMDLINE": null,
      "action": null,
      "notify_enabled": null,
      "poller_interval": null,
      "auth_event": [],
      "signal_number": null,
      "level": "warning",
      "_PID": null,
      "path": "/token",
      "duration": null,
      "_COMM": null,
      "config_max_pool_size": null,
      "sso_provider_id": null,
      "header": null,
      "_MACHINE_ID": null,
      "web3_domain": null,
      "login_method": null,
      "limit_strategy": null,
      "_STREAM_ID": null,
      "long_wait_duration_samples": null,
      "config_conn_max_idle_time": null,
      "source_type": null,
      "_LINE_BREAK": null,
      "web3_address": null,
      "_EXE": null,
      "_AUDIT_SESSION": null,
      "_TRANSPORT": null,
      "x_forwarded_proto": null,
      "time": null,
      "mail_to": null,
      "_GID": null,
      "stack": null,
      "x_forwarded_host": null,
      "limit_conn_max_lifetime": null,
      "saml_entity_id": null,
      "worker_type": null,
      "poller_enabled": null,
      "status": null,
      "_UID": null,
      "valid_until": null,
      "web3_uri": null,
      "method": "POST",
      "limit_max_idle_conns": null,
      "CODE_FILE": null,
      "remote_addr": "103.251.58.137",
      "provider": null,
      "_SYSTEMD_UNIT": null,
      "issuer": null,
      "error": "429: Request rate limit reached",
      "limit_max_open_conns": null,
      "client_id": null,
      "config_conn_percentage": null,
      "MESSAGE_ID": null,
      "url": null,
      "referer": "https://www.example.com",
      "_SYSTEMD_INVOCATION_ID": null,
      "CODE_FUNC": null,
      "_BOOT_ID": null,

      "SYSLOG_FACILITY": null,
      "msg": "429: Request rate limit reached",
      "mail_type": null,
      "grace_period_duration": null,
      "EXECUTABLE": null,
      "config_conn_max_lifetime": null,
      "user_id": null,
      "_CMDLINE": null,
      "action": null,
      "notify_enabled": null,
      "poller_interval": null,
      "auth_event": [],
      "signal_number": null,
      "level": "warning",
      "_PID": null,
      "path": "/token",
      "duration": null,
      "_COMM": null,
      "config_max_pool_size": null,
      "sso_provider_id": null,
      "header": null,
      "_MACHINE_ID": null,
      "web3_domain": null,
      "login_method": null,
      "limit_strategy": null,
      "_STREAM_ID": null,
      "long_wait_duration_samples": null,
      "config_conn_max_idle_time": null,
      "source_type": null,
      "_LINE_BREAK": null,
      "web3_address": null,
      "_EXE": null,
      "_AUDIT_SESSION": null,
      "_TRANSPORT": null,
      "x_forwarded_proto": null,
      "time": null,
      "mail_to": null,
      "_GID": null,
      "stack": null,
      "x_forwarded_host": null,
      "limit_conn_max_lifetime": null,
      "saml_entity_id": null,
      "worker_type": null,
      "poller_enabled": null,
      "status": null,
      "_UID": null,
      "valid_until": null,
      "web3_uri": null,
      "method": "POST",
      "limit_max_idle_conns": null,
      "CODE_FILE": null,
      "remote_addr": "103.251.58.137",
      "provider": null,
      "_SYSTEMD_UNIT": null,
      "issuer": null,
      "error": "429: Request rate limit reached",
      "limit_max_open_conns": null,
      "client_id": null,
      "config_conn_percentage": null,
      "MESSAGE_ID": null,
      "url": null,
      "referer": "https://www.example.com",
      "_SYSTEMD_INVOCATION_ID": null,
      "CODE_FUNC": null,
      "_BOOT_ID": null,

K

kirkOP•12/10/25, 8:46 PM

      "INVOCATION_ID": null,
      "__MONOTONIC_TIMESTAMP": null,
      "web3_chain": null,
      "timestamp": null,
      "__REALTIME_TIMESTAMP": null,
      "over_2_waiting_samples": null,
      "immediate_login_after_signup": null,
      "CODE_LINE": null,
      "_SYSTEMD_SLICE": null,
      "count": null,
      "instance_id": null,
      "args": [],
      "server_max_conns": null,
      "SYSLOG_IDENTIFIER": null,
      "config_max_idle_pool_size": null,
      "metadata": [],
      "auth_audit_event": [],
      "_CAP_EFFECTIVE": null,
      "factor_id": null,
      "_SELINUX_CONTEXT": null,
      "expires_in": null,
      "version": null,
      "project": null
    }
  ],
  "timestamp": 1765380680000000
}

      "INVOCATION_ID": null,
      "__MONOTONIC_TIMESTAMP": null,
      "web3_chain": null,
      "timestamp": null,
      "__REALTIME_TIMESTAMP": null,
      "over_2_waiting_samples": null,
      "immediate_login_after_signup": null,
      "CODE_LINE": null,
      "_SYSTEMD_SLICE": null,
      "count": null,
      "instance_id": null,
      "args": [],
      "server_max_conns": null,
      "SYSLOG_IDENTIFIER": null,
      "config_max_idle_pool_size": null,
      "metadata": [],
      "auth_audit_event": [],
      "_CAP_EFFECTIVE": null,
      "factor_id": null,
      "_SELINUX_CONTEXT": null,
      "expires_in": null,
      "version": null,
      "project": null
    }
  ],
  "timestamp": 1765380680000000
}

      "INVOCATION_ID": null,
      "__MONOTONIC_TIMESTAMP": null,
      "web3_chain": null,
      "timestamp": null,
      "__REALTIME_TIMESTAMP": null,
      "over_2_waiting_samples": null,
      "immediate_login_after_signup": null,
      "CODE_LINE": null,
      "_SYSTEMD_SLICE": null,
      "count": null,
      "instance_id": null,
      "args": [],
      "server_max_conns": null,
      "SYSLOG_IDENTIFIER": null,
      "config_max_idle_pool_size": null,
      "metadata": [],
      "auth_audit_event": [],
      "_CAP_EFFECTIVE": null,
      "factor_id": null,
      "_SELINUX_CONTEXT": null,
      "expires_in": null,
      "version": null,
      "project": null
    }
  ],
  "timestamp": 1765380680000000
}

      "INVOCATION_ID": null,
      "__MONOTONIC_TIMESTAMP": null,
      "web3_chain": null,
      "timestamp": null,
      "__REALTIME_TIMESTAMP": null,
      "over_2_waiting_samples": null,
      "immediate_login_after_signup": null,
      "CODE_LINE": null,
      "_SYSTEMD_SLICE": null,
      "count": null,
      "instance_id": null,
      "args": [],
      "server_max_conns": null,
      "SYSLOG_IDENTIFIER": null,
      "config_max_idle_pool_size": null,
      "metadata": [],
      "auth_audit_event": [],
      "_CAP_EFFECTIVE": null,
      "factor_id": null,
      "_SELINUX_CONTEXT": null,
      "expires_in": null,
      "version": null,
      "project": null
    }
  ],
  "timestamp": 1765380680000000
}

G

garyaustin•12/10/25, 8:48 PM

What call are they on?

G

garyaustin•12/10/25, 8:48 PM

Auth has all kind of rate limits that you can set in the dashboard.

K

kirkOP•12/10/25, 8:49 PM

it's the

/token

/token

/token

/token endpoint

G

garyaustin•12/10/25, 8:49 PM

K

kirkOP•12/10/25, 8:49 PM

if the client is refreshing their session and gets hit with the 429, will they be signed out on their device?

G

garyaustin•12/10/25, 8:50 PM

Check the rate limit setting for token refreshes.

G

garyaustin•12/10/25, 8:50 PM

Not sure what supabase-js does in the face of that.

G

garyaustin•12/10/25, 9:03 PM

It appears auth-js clears the session when it gets some errors. I can see it clear the session for /token with an auth error coming back... but can't find any list of what it considers auth errors to do that one.

https://github.com/supabase/supabase-js/blob/13af49b21cde4e49ca5ebd7a77e933dc4d9747f8/packages/core/auth-js/src/GoTrueClient.ts#L2492

K

kirkOP•12/10/25, 10:56 PM

thanks, was reviewing this code as well. gonna try rate limiting the endpoint locally and hopefully i lose the session which means i found the problem to my original issue, thank you

auth api logs contain many 429 errors

Similar Threads

Similar Threads

Similar Threads