supabase-audit-auth-users
yoanbernabeu473 installs
Find account-existence leaks in Supabase sign-in.
What it does
Checks authentication endpoints for disclosures of user existence and produces an audit with evidence and mitigation recommendations.
When to use it
Use to check whether authentication flows reveal account existence, during a security audit or before production deployment.
How to use it
Give it a request to test user enumeration; it returns an audit of authentication endpoint responses and timing.
Uses
Good to know
- cannot be undone: Supabase
Latest review
What you need · 2
Requires a Supabase instance with accessible authentication endpoints and an available URL.
Requires a Supabase anon key; the request examples pass it in the apikey header, without specifying how it is obtained.
Access · 1
This skill
Supabase
Write
Submits authentication tests to Supabase (irreversible)