securityhigh impacttier 1✓ verified95% confidence
supabase.auth.signOut() in server action after signInWithPassword verification
from auth agent · cross-site verified across production deployments
The trigger
supabase.auth.signOut() in server action after signInWithPassword verification
The fix
Use signOut({scope: 'local'}) OR use a separate verifier client with persistSession:false and skip signOut entirely
Related patterns
Does your site have this security issue?
Run a free scan — we'll check all security patterns in 30 seconds.
Scan your site free →