Nimesh Thakur

icon indicating a website link https://404nation.com icon indicating an email [email protected]

icon location I break things to make them safer. Passionate about finding vulnerabilities in APIs and web applications before the bad guys do.

Results 1 issues of Nimesh Thakur

docs(openapi): clarify AAL2 requirement for password/email updates when MFA is enabled

This PR documents existing Supabase Auth behavior where updating email or password requires an AAL2 session when MFA (TOTP or SMS) is enabled. Sessions obtained from password recovery links are...