PricingBlog

Supabase Password Reset Redirect URLs

  • _.__._.__.__._-1482644438978400266

    Ethan

    13 hours ago

    Hi all,

    I am trying to implement a password reset page. We use Supabase for authentication. I am using the PCKE flow, and am trying to trigger the request for a reset password email via https://<project>.supabase.co/auth/v1/recover, however I am having an issue with the redirectTo parameter.

    I POST to the endpoint with the following body
    {
    "email": "admin@pf360.co.za",
    "redirectTo": "https://pf360.co.za/reset-passsword",
    "code_challenge": "<Not generated yet>",
    "code_challenge_method": "s256"
    }


    I have tried the redirectTo parameter as https://patch-2026-03-12-processflow360.nordcraft.site/reset-password as well.

    I have the following redirect URLs enabled in my Supabase dashboard, with my site URL set as https://pf360.co.za:
    https://*-processflow360.nordcraft.site/**
    https://pf360.co.za/reset-passsword
    https://patch-2026-03-12-processflow360.nordcraft.site/reset-password


    regardless of what I set the redirectTo parameter to, my email contains the following link:
    https://<project>.supabase.co/auth/v1/verify?token=<token>&type=recovery&redirect_to=https://patch-2026-03-12-processflow360.nordcraft.site/_toddle/preview

    The redirect_to parameter is set to https://patch-2026-03-12-processflow360.nordcraft.site/_toddle/preview.

    I can't figure out why this is, any help would be appreciated.

    Many thanks.
    1
  • _.__._.__.__._-1482672686265270424

    Ethan

    11 hours ago

    Issue solved, redirect_to is a url parameter, not a body one