AuthApiError "Invalid login credentials" has undefined code

[peterkos]

Bug report

• I confirm this is a bug with Supabase, not with my own application.
• I confirm I have searched the Docs, GitHub Discussions, and Discord.

Describe the bug

When attempting to login a user with invalid credentials, the returned error is missing a code:

const { data, error } = await supabase.auth.signInWithPassword({
  email: loginDto.email,
  password: loginDto.password,
});
if (isAuthApiError(error)) {
  if (error.code == 'user_not_found') {
    throw new UnauthorizedException();
  } else {
    throw new InternalServerErrorException(
      `Unhandled Supabase auth error code: ${error}`, // <-- error.code undefined
    );
  }
} else { /* ... */ }

Output:

Unhandled exception: {
  "statusCode": 500,
  "message": "Unhandled Supabase auth error code: AuthApiError: Invalid login credentials",
  "error": "Internal Server Error"
}

The source of AuthAPIError has code as undefined:

auth-js/src/lib/errors.ts

Lines 78 to 82 in 29fc62c

	export class AuthInvalidCredentialsError extends CustomAuthError {
	constructor(message: string) {
	super(message, 'AuthInvalidCredentialsError', 400, undefined)
	}
	}

To Reproduce

1. Perform supabase.auth.signInWithPassword({ /* ... */ }) with incorrect credentials
2. Observe error.code is undefined

Expected behavior

Per docs:

Use isAuthApiError instead of instanceof checks to see if an error you caught is of this type.

Do not use string matching on error messages! Always use the name and code properties of error objects to identify the situation.

code should be defined for an AuthApiError.

Screenshots

If applicable, add screenshots to help explain your problem.

System information

• OS: macOS
• Version of supabase-js: 2.45.0
• Version of Node.js: v21.7.3

[peterkos]

It looks like this is also here: supabase/auth#1631

I figured this issue was JS-specific, but it appears not?

[peterkos]

My workaround:

if (isAuthApiError(error)) {
  if (error.code == 'user_not_found') {
    throw new UnauthorizedException();
  } else {
    throw new UnauthorizedException(`${error}`);
  }
} else if (error) {
  throw new InternalServerErrorException(
    `Unhandled unknown error: ${error}`,
  );
}

[J0]

Hey,

Thanks for flagging the issue. A fix has been merged and this should be patched later this week or early next week with our next deploy

Hope this helps. I'm going to close for now but feel free to re-open or head to #804 if there are any issues after upgrading. You can track the version under Settings > Infrastructure > Service Versions > Auth version. Should be good to go once your project version is v2.159.0 or later