auth
auth copied to clipboard
"Web3 Wallet" Auth message construction invalid (breaks recognition)
Bug report
Describe the bug
Supabase "Web3 Wallet" Authentication provider constructs and invalid EIP-4361 message, it does not include a nonce, making it out of spec and not recognized by wallets like MetaMask.
To Reproduce
Steps to reproduce the behavior:
- Enable "Web3 Wallet" under supabase -> Authentication -> Sign in / Providers
- Setup the login flow / button on your supabase app
- Try to sign in - the message will not have a nonce
- See MetaMask prompt saying "Signature request" instead of "Sign in request" - and all validation missing.
Expected behavior
Include a nonce as per the official EIP-4361 spec so the message is valid and recognized.