© 2026 Hedgehog Software, LLC

TwitterGitHubDiscord
More
CommunitiesDocsAboutTermsPrivacy
Search
Star
Setup for Free
SupabaseS
Supabase•2w ago•
4 replies
David Constante

rate limit - supabase auth: many requests to "/token"

auth
A few days ago I started experiencing this behavior where many requests are made out of nowhere to "/token" until I get the error "/token | 429: Request rate limit reached"

I'm using JWT Signing Keys with ECC (P-256) and no longer using supabase.auth.getUser(), I'm reading session data from supabase.auth.getClaims(). I understand this is all part of the change made to authentication with Asymmetric Keys.

All requests are coming from http://localhost:3000, but the app is stopped.

{\"component\":\"api\",\"duration\":198970,\"error_code\":\"over_request_rate_limit\",\"grant_type\":\"refresh_token\",\"level\":\"info\",\"method\":\"POST\",\"msg\":\"request completed\",\"path\":\"/token\",\"referer\":\"http://localhost:3000\",\"remote_addr\":\"181.198.57.22\",\"request_id\":\"9c1f934332953262-GYE\",\"status\":429,\"time\":\"2026-01-22T14:00:01Z\"}
{\"component\":\"api\",\"duration\":198970,\"error_code\":\"over_request_rate_limit\",\"grant_type\":\"refresh_token\",\"level\":\"info\",\"method\":\"POST\",\"msg\":\"request completed\",\"path\":\"/token\",\"referer\":\"http://localhost:3000\",\"remote_addr\":\"181.198.57.22\",\"request_id\":\"9c1f934332953262-GYE\",\"status\":429,\"time\":\"2026-01-22T14:00:01Z\"}


I'm building my clients this way:

import { createBrowserClient } from '@supabase/ssr'
import { createServerClient } from '@supabase/ssr'
import { createBrowserClient } from '@supabase/ssr'
import { createServerClient } from '@supabase/ssr'


To use the clients I am calling it this way, I don't know if it has anything to do with the fact that in each function I do a "create client" and that is repeated in several functions.

export const getData = async () => {
  const supabase = await createClient()
   …
}
export const getData = async () => {
  const supabase = await createClient()
   …
}


What could be causing the repeated calls to /token?
Screenshot_2026-01-22_at_09.03.32.png
Supabase banner
SupabaseJoin
Supabase gives you the tools, documentation, and community that makes managing databases, authentication, and backend infrastructure a lot less overwhelming.
45,816Members
Resources
Was this page helpful?

Similar Threads

Recent Announcements

Similar Threads

Supabase Auth /token API 429 rate limit reached
SupabaseSSupabase / help-and-questions
6mo ago
Rate limiting on supabase.auth.getUser(token)
SupabaseSSupabase / help-and-questions
4w ago
Supabase JS rate limit
SupabaseSSupabase / help-and-questions
4mo ago
Auth Email Rate Limit
SupabaseSSupabase / help-and-questions
4y ago