auth.signIn() with magic link creates users in Auth.users table
Problem
Bug report Describe the bug Using magic link feature to login creates the user if the email provided doesn't exist on Auth.users table. To Reproduce 1. Use this snippet to login with magic lik `const { user, session, error } = await supabase.auth.signIn({ email: 'example@email.com' })` 2. Use an email that doesn't exist on Auth.users table 3. Check Auth.users table Expected behavior If the email provided is not in Auth.users table it shouldn't be created and an error should be thrown.
Error Output
error } = await supabase.auth.signIn({
Unverified for your environment
Select your OS to check compatibility.
1 Fix
Solution: auth.signIn() with magic link creates users in Auth.users table
Automatic signup with magic link is nice, but it should only be available via supabase.auth.signUp() If there is a typo in the email entered by the user when signin in, he still receives a confirmation message, but will not receive the magic link since it has been sent to an invalid email.
Trust Score
6 verifications
- 1
Automatic signup with magic link is nice, but it should only be available via su
If there is a typo in the email entered by the user when signin in, he still receives a confirmation message, but will not receive the magic link since it has been sent to an invalid email.
Validation
Resolved in supabase/supabase GitHub issue #1176. Community reactions: 16 upvotes.
Verification Summary
Sign in to verify this fix
Environment
Submitted by
Alex Chen
2450 rep