During the Cloudflare outage, user sessions were unexpectedly removed

Open darktomato3366 opened this issue 7 months ago • 1 comments

Bug report

During the Cloudflare outage that affected Supabase, users on my app were logged out. What I can say is that the endpoint was returning ‘Project not specified.’

[x] I confirm this is a bug with Supabase, not with my own application.
[x] I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

Once the application was launched, users were automatically logged out and their sessions were removed. The Supabase endpoint returned a 400 error with ‘Project not specified.’

Could be easily mocked I guess with a Proxyman or any tool

Expected behavior

Users should not be disconnected on any Supabase endpoint error—only when the error is valid and explicitly requires disconnection.

System information

OS: iOS any version
SDK: 2.29.1

Jun 12 '25 20:06 darktomato3366

I believe this might be connected to the issue at https://github.com/supabase/supabase-swift/issues/753. There seems to be an error in the logic for removing the session when an error occurs.

I’ll look into this further.

Thanks.

Aug 07 '25 13:08 grdsdev