01Writing · Tag

Articles tagged "auth-jwt".

At a glance
Articles
1
Published
Apr 2026
Reading time
6 min
In series
1

Articles tagged auth-jwt

6 min securitysupabaseauth-jwt

User enumeration via password reset: the bug in default forgot-password flows

Most forgot-password endpoints leak whether an email exists. Fix: return the same response always, regardless of account status.

Supabase Production Hardening 5/8

Your forgot-password form will tell a stranger which of your customers have accounts.

02Narrow it down

03Read in order

One series runs through this tag.

All articles