Improve: auth provider check before auth flow

[ben-fornefeld]

Note

Gate all auth actions behind a Supabase auth health check and update tests to mock the health endpoint.

• Backend
  • Add checkAuthProviderHealth() in src/server/auth/auth-actions.ts to call GET /auth/v1/health with timeout and caching; returns response.ok.
  • Introduce AUTH_PROVIDER_ERROR_MESSAGE and use encodedRedirect('error', ...) when provider is unhealthy.
  • Apply health pre-check to signInWithOAuthAction, signUpAction, signInAction, and forgotPasswordAction (preserving returnTo when applicable).
• Tests
  • In src/__test__/integration/auth.test.ts, mock global fetch for the health check and reset per test; remove redundant vi.resetAllMocks() in afterEach.

^{Written by Cursor Bugbot for commit 17596e6. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Preview	Comments	Updated (UTC)
web	Ready	Preview	Comment	Nov 24, 2025 10:14am
web-juliett	Ready	Preview	Comment	Nov 24, 2025 10:14am

[cursor]

Bug: Missing health check in forgot password action

The forgotPasswordAction doesn't include a health check before calling supabase.auth.resetPasswordForEmail, while all other auth actions (signInAction, signUpAction, signInWithOAuthAction) now check provider health first. This inconsistency means users could attempt password resets when the auth provider is down, leading to confusing failures instead of the clear error message shown for other auth operations.

src/server/auth/auth-actions.ts#L243-L265

dashboard/src/server/auth/auth-actions.ts

Lines 243 to 265 in 920fa60

	export const forgotPasswordAction = actionClient
	.schema(forgotPasswordSchema)
	.metadata({ actionName: 'forgotPassword' })
	.action(async ({ parsedInput: { email } }) => {
	const supabase = await createClient()
	const { error } = await supabase.auth.resetPasswordForEmail(email)
	if (error) {
	l.error(
	{
	key: 'forgot_password_action:supabase_error',
	error,
	},
	`Password reset failed: ${error.message || 'Unknown error'}`
	)
	if (error.message.includes('security purposes')) {
	return returnServerError(
	'Please wait before requesting another password reset.'
	)
	}

 

---