Hi everyone,
I’m trying to implement password reset with CAPTCHA protection using Supabase and WeWeb, but I’ve run into a problem.
The Issue:
The WeWeb Supabase Auth “Forgot password” action doesn’t have a field where I can pass the CAPTCHA token. According to Supabase docs, when CAPTCHA is enabled, you need to include the captchaToken
parameter in your reset request like this:
await supabase.auth.resetPasswordForEmail('user@example.com', {
redirectTo: 'http://example.com/account/update-password',
captchaToken: yourCaptchaToken
})
What I’ve Tried:
-
Added hCaptcha component to my form
-
Successfully get the token when user completes CAPTCHA
-
But there’s no way to pass this token through WeWeb’s built-in “Forgot password” action
Could we get a CAPTCHA token field added to the Supabase “Forgot password” action in WeWeb? This would make it much easier to implement secure password reset flows without having to write custom code.