Skip to content

fix(realtime): trigger set auth on INITIAL_SESSION event#2531

Merged
filipecabaco merged 1 commit into
masterfrom
fix/set-auth-on-initial-session-event-real-897
Jul 15, 2026
Merged

fix(realtime): trigger set auth on INITIAL_SESSION event#2531
filipecabaco merged 1 commit into
masterfrom
fix/set-auth-on-initial-session-event-real-897

Conversation

@filipecabaco

Copy link
Copy Markdown
Member

@filipecabaco
filipecabaco requested a review from a team as a code owner July 15, 2026 22:47
@github-actions github-actions Bot added the realtime-js Related to the realtime-js library. label Jul 15, 2026
@coderabbitai

coderabbitai Bot commented Jul 15, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 65de4ee9-e5da-4571-a0dd-c1a7a805077f

📥 Commits

Reviewing files that changed from the base of the PR and between 5c18b62 and 6b44db1.

📒 Files selected for processing (2)
  • packages/core/supabase-js/src/SupabaseClient.ts
  • packages/core/supabase-js/test/unit/SupabaseClient.test.ts

📝 Walkthrough

Summary by CodeRabbit

  • Bug Fixes
    • Improved realtime authentication during initial session setup by ensuring the current access token is applied immediately.
    • Helps realtime connections authenticate correctly when a session is first established.

Walkthrough

SupabaseClient._handleTokenChanged now updates the realtime authentication token for INITIAL_SESSION events, in addition to TOKEN_REFRESHED and SIGNED_IN. A unit test verifies that the initial session token is passed to client.realtime.setAuth.

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 ESLint

If the error stems from missing dependencies, add them to the package.json file. For unrecoverable errors (e.g., due to private dependencies), disable the tool in the CodeRabbit configuration.

ESLint install timed out. The project may have too many dependencies for the sandbox.


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@pkg-pr-new

pkg-pr-new Bot commented Jul 15, 2026

Copy link
Copy Markdown

Open in StackBlitz

@supabase/auth-js

npm i https://pkg.pr.new/@supabase/auth-js@2531

@supabase/functions-js

npm i https://pkg.pr.new/@supabase/functions-js@2531

@supabase/postgrest-js

npm i https://pkg.pr.new/@supabase/postgrest-js@2531

@supabase/realtime-js

npm i https://pkg.pr.new/@supabase/realtime-js@2531

@supabase/storage-js

npm i https://pkg.pr.new/@supabase/storage-js@2531

@supabase/supabase-js

npm i https://pkg.pr.new/@supabase/supabase-js@2531

commit: 6b44db1

@coveralls

Copy link
Copy Markdown

Coverage Status

coverage: 80.57% (+0.002%) from 80.568% — fix/set-auth-on-initial-session-event-real-897 into master

@filipecabaco
filipecabaco merged commit 130fa11 into master Jul 15, 2026
28 of 29 checks passed
@filipecabaco
filipecabaco deleted the fix/set-auth-on-initial-session-event-real-897 branch July 15, 2026 23:45
mandarini pushed a commit to supabase/ssr that referenced this pull request Jul 16, 2026
This PR updates `@supabase/supabase-js` to v2.110.7.

**Source**: supabase-js-stable-release

---

## Release Notes

## v2.110.7

## 2.110.7 (2026-07-16)

### 🩹 Fixes

- **postgrest:** correct self-reference inference
([#2525](supabase/supabase-js#2525))
- **realtime:** trigger set auth on INITIAL_SESSION event
([#2531](supabase/supabase-js#2531))
- **realtime:** update phoenix to fix presence issue
([#2532](supabase/supabase-js#2532))

### ❤️ Thank You

- Eduardo Gurgel
- Filipe Cabaço @filipecabaco
- Vaibhav @7ttp

This PR was created automatically.

Co-authored-by: supabase-workflow-trigger[bot] <266661614+supabase-workflow-trigger[bot]@users.noreply.github.com>
mandarini pushed a commit to supabase/supabase that referenced this pull request Jul 22, 2026
This PR updates @supabase/*-js libraries to version 2.110.8.

**Source**: supabase-js-stable-release

**Changes**:
- Updated @supabase/supabase-js to 2.110.8
- Updated @supabase/auth-js to 2.110.8
- Updated @supabase/realtime-js to 2.110.8
- Updated @supabase/postgest-js to 2.110.8
- Refreshed pnpm-lock.yaml

---

## Release Notes

## v2.110.8

## 2.110.8 (2026-07-21)

### 🩹 Fixes

- **auth:** downgrade aborted/transient fetch failures from
console.error to warn
([#2544](supabase/supabase-js#2544))
- **functions:** clean up cross-signal abort listener on invoke() return
([#2487](supabase/supabase-js#2487))
- **functions:** match response Content-Type case-insensitively
([#2515](supabase/supabase-js#2515))
- **storage:** url-encode object key in CDN purge methods
([#2545](supabase/supabase-js#2545))
- **supabase:** skip Node warning in Deno
([#2541](supabase/supabase-js#2541))

### ❤️ Thank You

- Franco Kaddour @FrancoKaddour
- Katerina Skroumpelou @mandarini
- Pedro Henrique
- Vaibhav @7ttp
## v2.110.7

## 2.110.7 (2026-07-16)

### 🩹 Fixes

- **postgrest:** correct self-reference inference
([#2525](supabase/supabase-js#2525))
- **realtime:** trigger set auth on INITIAL_SESSION event
([#2531](supabase/supabase-js#2531))
- **realtime:** update phoenix to fix presence issue
([#2532](supabase/supabase-js#2532))

### ❤️ Thank You

- Eduardo Gurgel
- Filipe Cabaço @filipecabaco
- Vaibhav @7ttp

This PR was created automatically.

Co-authored-by: supabase-workflow-trigger[bot] <266661614+supabase-workflow-trigger[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

realtime-js Related to the realtime-js library.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants