releases.shpreview
SupabaseSupabase/Auth

Legacy refresh tokens revoked; OAuth replay race fixed

v2.193.1

July 20, 2026Supabase AuthView original ↗
4 fixesThis release4 fixesBug fixesAI-tallied from the release notes
From the original release noteView original ↗

2.193.1 (2026-07-16)

Bug Fixes

  • build darwin-arm64 release binaries with GOOS=darwin (#2618) (318b4d1)
  • ensure legacy refresh token revoked (#2624) (8748000)
  • oauth: prevent authorization-code replay race at /oauth/token (#2612) (bdbf01e)
  • siwe: return false instead of panicking on malformed signatures (#2625) (c3005a4)

Checksums

SHA1

auth-v2.193.1-arm64.tar.gz:

489b51cd6118d8e85beee4a471c63d900810b26b

auth-v2.193.1-darwin-arm64.tar.gz:

b65c9a11f314d1cef72e28a3fb5cf7486d9d746a

auth-v2.193.1-x86.tar.gz:

9f5a76a13fe5bbbdb8210646e3967460c20174f1

auth-v2.193.1-amd64.tar.xz:

fd7166692d799ea46bd205e740b212ad2e0254fa

auth-v2.193.1-arm64.tar.xz:

ed5189ad47bfe5ae5b2cba7c3bd3c63853df5a0c

SHA256

auth-v2.193.1-arm64.tar.gz:

fc36ca4f696aea16d53403b368a1a8c3c0e34956a1090d54e16c3c306c8c543b

auth-v2.193.1-darwin-arm64.tar.gz:

95c021fcae63ba879ec1af9fefe43ccee33f355ac944fd322a7350a80c0d11e7

auth-v2.193.1-x86.tar.gz:

2d998fe99928ab764d4a5cb857d2ffa4ca504a05afba0b5405202a0fc76b4761

auth-v2.193.1-amd64.tar.xz:

ec134c74e02b88b4bb42526a456f9b77584424749543c1fd706dbe33ac4e0233

auth-v2.193.1-arm64.tar.xz:

9b058214f623d45c72f4559a95725f0f65e7234ebf863659aec5ec5472b2ef18

Fetched July 20, 2026

Legacy refresh tokens revoked; OAuth replay race fixed… — releases.sh