fix(auth): add missing colon to Resources line in SIWS message - #2790

🔍 Description

What changed?

signInWithWeb3({ chain: 'solana' }) builds the Sign-In-With-Solana message itself when the wallet has signMessage() but no signIn(). When options.signInWithSolana.resources is set, the list header was written as Resources without a colon. This writes Resources: and adds a regression test for the generated message.

Why was this change needed?

The Auth server's SIWS parser only starts the resource list on a line that is exactly Resources: and reads every other line as key: value. The bare Resources line makes siws.ParseMessage fail with siws: encountered unparsable line at index 6, which the web3 grant returns as 400 validation_failed, so these sign-ins cannot succeed. The SIWS format and the Ethereum builder in this package already use Resources:.

📸 Screenshots/Examples

 Issued At: 2026-10-24T16:35:08.407Z
-Resources
+Resources:
 - https://example.com/tos

🔄 Breaking changes

• This PR contains no breaking changes

📋 Checklist

• I have read the Contributing Guidelines
• My PR title follows the conventional commit format: <type>(<scope>): <description>
• I have run pnpm nx format to ensure consistent code formatting
• I have added tests for new functionality (if applicable)
• I have updated documentation (if applicable)

📝 Additional notes

• Ran: npx jest --config jest.config.cli.js test/GoTrueClient.web3.test.ts asserts the whole generated message; it fails on master (- Resources: / + Resources) and passes with the fix.
• Ran: the auth-js jest suites that do not need the local Supabase stack pass (19 suites, 274 tests).
• Ran: tsc --noEmit with tsconfig.json, tsconfig.module.json and tsconfig.test.json is clean; prettier --check is clean on both changed files.
• Checked: the message generated on master fails siws.ParseMessage from supabase/auth master as above; the fixed message parses with both resources.