OTP via email for signup

[potpov]

Hello,
First of all, thank you for your great work.

I would like to ask you if there is a way to use the email sign-up with the OTP verification rather than the email link.
(as it already happens for the registration via mobile phone).

For instance I would love to have the same API entry at the first stage:

const { user, session, error } = await supabase.auth.signUp({
  email: '[email protected]',
  password: 'example-password',
})

But then send to the user a token rather than a link, and verify the token on the same page my user was visiting:

let { session, error } = await supabase.auth.verifyOTP({
  email: '[email protected]',
  token: '123456',
})

Haven't found this on the doc, I wonder if there is already a workaround or if this can be an idea for future-features.
thank you!

[awalias]

thanks for the question! we're tracking this one here: supabase/auth#290

[zxqp]

https://github.com/supabase/gotrue/releases/tag/v2.5.8

is it ready to use now?

[asyncink]

@awalias, +1 for @zxqp question

[potpov]

Alrighty,
I assumed that was more of a discussion and didn't check the issues!
my bad, thank you for the link!

[GaryAustin1]

I can confirm per the latest blog post: https://supabase.com/blog/2022/03/28/community-day (scroll to Send OTP via email)

Email OTP is working!

Email on signup with template modified with {{ .Token}}

And call made to confirm the user.

const {user,session,error} = await supabase.auth.verifyOTP ({
	email:'[email protected]',
	token:'owOWaODcyzG0ItuHQ24ipA',
	type:'signup'
})

[asyncink]

thank you for your reply!

I made it work:

1. request otp:

const { error } = await supabase.auth.signIn({ email })

2. verify otp:

const { session, error: verifyError } = await supabase.auth.verifyOTP({
  email,
  token,
  type: 'magiclink'
})

[niklasgrewe]

does anyone know if it is also possible to send only four digit or six digit codes like Slack and many others do?

The current codes are rather less suitable for manual input, or is there another reason why these are cryptic?

[GaryAustin1]

This is an old post. There is a short, default 6 digit, numeric code using {{Token}} in the email template. You can set the length in settings.

[shihfu]

@GaryAustin1, can you point me to the docs for this particular setting? I can't seem to find this option anywhere.

[GaryAustin1]

I can't find it anymore...

This is still in the code...
if config.Mailer.OtpLength == 0 || config.Mailer.OtpLength < 6 || config.Mailer.OtpLength > 10 {
It is still in the gotrue code.... https://github.com/supabase/gotrue/blob/425487325b3e1d7be4661e9f292232205a9a3ce0/internal/conf/configuration.go#L577

But I can't find it or any record of it being removed. So could be I was mistaken back then or it was removed.

[othnielussher]

@shihfu
From your project dashboard page, locate it at Authentication -> Configuration -> Email Templates.
Then in the message source section, you can then replace the usually default variable {{ .ConfirmationURL }} with {{ .Token }}

[shihfu]

@othnielussher, I still don't see the option to change the token length.

[ddtch]

I still have same problem. all is set up, OTP should work but magic link is giving me an error like AuthApiError: Signups not allowed for otp

[GaryAustin1]

You should start a new discussion or ask on Discord. This is very old and AuthApiError does not appear anywhere here.
You should provide the code in the new post for what call is actually failing.

Is your email provider enabled in the authentication section of the dashboard?