-
Notifications
You must be signed in to change notification settings - Fork 607
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Bug report
Describe the bug
Supabase "Web3 Wallet" Authentication provider constructs and invalid EIP-4361 message, it does not include a nonce, making it out of spec and not recognized by wallets like MetaMask.
To Reproduce
Steps to reproduce the behavior:
- Enable "Web3 Wallet" under supabase -> Authentication -> Sign in / Providers
- Setup the login flow / button on your supabase app
- Try to sign in - the message will not have a nonce
- See MetaMask prompt saying "Signature request" instead of "Sign in request" - and all validation missing.
Expected behavior
Include a nonce as per the official EIP-4361 spec so the message is valid and recognized.
Screenshots
Official SIWE Validator tool (https://docs.siwe.xyz/validator/)
MetaMask message recognition failure (Supabase left - correct format right)

Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working