Skip to content

IP detection in redirect url breaks Expo Go deep linking #2039

Open
@h4lfheart

Description

@h4lfheart

Bug report

  • [ x] I confirm this is a bug with Supabase, not with my own application.
  • [ x] I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

When trying to redirect to a deep link while using expo go, supabase blocks the redirect url of exp://192.168.22.47:8081/--/auth because of the ip matching.

To Reproduce

  • Add exp://** as an additional redirect url
  • Set the redirect url for an oauth singin to expo go's deep link url (i.e. exp://192.168.22.47:8081/--/auth)

Expected behavior

Still flags redirects to actual ips, but if the ips are a part of the latter part of the url like above, it should continue

System information

  • OS: Linux (Host) Android (React Native + Expo)
  • Version of supabase-js: 2.49.5-next.1
  • Version of Node.js: 23.8.0

Additional context

The ip matching code:

if decimalIPAddressPattern.MatchString(refurl.Hostname()) {

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions