# "No access token provided" when resetting password with Supabase **URL:** \ **Category:** Ask us anything\ **Tags:** supabase\ **Created:** [October 3, 2024, 10:18pm UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721 "2024-10-03T22:18:34Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![metalsteve81](https://avatars.discourse-cdn.com/v4/letter/m/53a042/32.png) [@metalsteve81](https://community.weweb.io/u/metalsteve81)\ **Post date:** [October 3, 2024, 10:18pm UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/1 "2024-10-03T22:18:34Z")
I am trying to reset my password, went through the docs and the videos and I dont see how I am doing anything different but after clicking the reset password link thats emailed and then trying to submit a new password I get this error “No access token provided” has anyone encountered this and knows what I am doing wrong? This is with supabase. ![error](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/9/9df50c27e81e9c0997b7f8abc57562239efc561d.png) ---
**Author:** ![DanielL](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/daniell/32/13398_2.png) [@DanielL](https://community.weweb.io/u/DanielL)\ **Post date:** [October 7, 2024, 9:24am UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/2 "2024-10-07T09:24:15Z")
Hi @metalsteve81 Could you please provide the link to your project in private, so I can have a better look? ---
**Author:** ![DanielL](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/daniell/32/13398_2.png) [@DanielL](https://community.weweb.io/u/DanielL)\ **Post date:** [October 8, 2024, 7:57am UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/3 "2024-10-08T07:57:05Z")
Hi @metalsteve81 I can’t create an account, so I can’t reproduce the issue. Your workflow seems ok to me. I think maybe you need to set up a custom SMTP server on Supabase for the Auth flows, as it could be affecting the password reset functionality. You can use a service like Resend for that: [Supabase Auth: Changes to default email provider · supabase · Discussion #29370 · GitHub](https://github.com/orgs/supabase/discussions/29370) ---
**Author:** ![metalsteve81](https://avatars.discourse-cdn.com/v4/letter/m/53a042/32.png) [@metalsteve81](https://community.weweb.io/u/metalsteve81)\ **Post date:** [October 8, 2024, 2:20pm UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/4 "2024-10-08T14:20:11Z")
I will do that today thank you. I really dont like their limited ability for testing. I am having quite a few issues, another one I am about to make a post about because Im lost and stuck again. ---
**Author:** ![NicolasLatitudes](https://avatars.discourse-cdn.com/v4/letter/n/ad7895/32.png) [@NicolasLatitudes](https://community.weweb.io/u/NicolasLatitudes)\ **Post date:** [November 6, 2024, 1:17pm UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/5 "2024-11-06T13:17:40Z")
Hello, I have the same exact problem **with a custom SMTP** The redirection to my email change confirmation page works fine but I also have this “no access token provided” error 😕 Any idea about why this could happen ? It’s a bit uneasy for me to debug as the token manipulation by weweb is visibly made in background (of what can be seen in the automation and all) That’s a very big problem for us, any user who forgot his password is currently blocked 😕 ---
**Author:** ![MathiasS-B](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/mathiass-b/32/10201_2.png) [@MathiasS-B](https://community.weweb.io/u/MathiasS-B)\ **Post date:** [March 26, 2025, 8:13am UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/6 "2025-03-26T08:13:20Z")
So i have been working quite abit with the reset token. The standard flow is. Supabase emails the user with a url to supabase. user click link. Supabase create access token and redirect user to Weweb application, Weweb looks at the Access token in the URL like: {{WewebsiteURL}}#Access-token= eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiYWRtaW4iOnRydWUsImlhdCI6MTUxNjIzOTAyMn0.KMUFsIDTnFmyG3nMiGM6H9FNFUROf3wh7SmqJp-QV30 Weweb saves this token and redirect user to same site with no token in the URL. User send new password to supabase with AccessToken provided. * * * The Weweb only works if there is a AccessToken provided from supabase. A problem arises when the users Mail program like Outlook, and some others: opens the supabase link to verify that its not a virus. if this happens, supabase gives the MailProgram the AccessToken and the mail program trashes the Accesstoken. When the User clicks the link, Supabase is like: "nahh bro. This link has already been used, you are not given a AccessToken. but you go to the weweb page and try. Weweb then cant find the AccessToken in the URL and the user/weweb can’t provide a AccessToken for supabase to reset the Password and supabase returns the Errror No access tokenprovided. Supabase Writes this in their documentation like this: [Email Templates | Supabase Docs](https://supabase.com/docs/guides/auth/auth-email-templates#email-prefetching) As of now its not totally clear what we need to do in the weweb Documentation. But I have the solution. in your Supabase template instead of the {{ .ConfirmationURL }} write the href thing like this: a href=“{{ .RedirectTo }}?token={{ .Token }}&type=recovery&email={{ .Email }}”" ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/7/7723ab319439ec0817df412060b674a58a957fd7.png) then in you Weweb page you need to use the workflow Verify OTP in your workflow. Taking the params in from the URL to log in the user with a single sign in operation. This makes the user logged in and the user can send their new password to Supabase. I made the work flow like this: Log the user in. ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/1/15062c8181a18f17e26db1c000a68ecf882c2e8f.png) Verify the URL has the otp token and email: ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/0/0daf3074b39a189f91ad9e94baf76d04bb47b171.png) Use weweb to log the user in and get the params ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/4/497a6df873bbdaddf23a2c8247dedb4bf6769ed4.png) ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/b/b9dbaf11f17ce72b6838b7f12d3989cf8688977f.png) And then the user is logged in. ![image](https://us1.discourse-cdn.com/flex016/uploads/weweb/original/2X/a/add8d118dff8c142320265bbfe11549dcfd3011a.png) this will make the Set new password work. I hope this makes sense. ---
**Author:** ![censuradho](https://avatars.discourse-cdn.com/v4/letter/c/34f0e0/32.png) [@censuradho](https://community.weweb.io/u/censuradho)\ **Post date:** [September 2, 2025, 1:49pm UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/7 "2025-09-02T13:49:11Z")
Thank you very much for sharing this information! I was facing the same issue using the Supabase JavaScript SDK integration with React.js, and I was able to solve my problem. ---
**Author:** ![MathiasS-B](https://sea2.discourse-cdn.com/flex016/user_avatar/community.weweb.io/mathiass-b/32/10201_2.png) [@MathiasS-B](https://community.weweb.io/u/MathiasS-B)\ **Post date:** [September 29, 2025, 9:18am UTC](https://community.weweb.io/t/no-access-token-provided-when-resetting-password-with-supabase/13721/8 "2025-09-29T09:18:40Z")
Thats great to hear!