i have next.js app with supabase handling auth. I want to reset-passsword without getting user authenticated or letting people know that are authenticated to mess up via changing the route in url.
i have forget-password form and server action which create redirectTo link, and on reset-password form i have exchanging the code which creates session & hydrates my store. On reset server action I am updating password.
Issue is to handle reset-password flow wihout creating session or allowing users to use app other than reset-password action.