The sign-in link opened the website
On a phone, people tap the sign-in link in their email. Instead of opening your app, Safari opens your website's home page, signed out.
This answers: Why does my magic link open the website? No coding needed. 2 quick decisions.
- Who is signed in
- How a request travels
Checking your access…
Why does my magic link open the website?
only redirects to addresses in its list. If your app's callback, such as yourapp://auth/callback, isn't listed, Supabase silently sends people to the Site URL, which is usually your website. Add the exact callback address to the list and make sure the scheme matches your app config.
Breaks at Auth service: App address not on the redirect list
Why AI tools write this bug
AI tools write the redirect in the app code correctly but can't change your dashboard settings, so the allow list never gets the new address.
How to fix it
- Add the app's exact callback address to .
3 more steps, and a prompt that checks your own app for this bug. Part of Pro.
UnlockCommon questions
- Why does it work in Expo Go but not the store app?
- Expo Go and your built app use different addresses. Each one you use needs its own entry in Supabase's Redirect URLs.