Owner

supertokens

16 indexed repositories · View on GitHub

supertokens-core
Open source alternative to Auth0 / Firebase Auth / AWS Cognito

Java · 15315 stars
supertokens-node
Node SDK for SuperTokens core

JavaScript · 329 stars
supertokens-auth-react
ReactJS authentication module for SuperTokens

TypeScript · 306 stars
supertokens-golang
GoLang SDK for SuperTokens

Go · 154 stars
supertokens-python
Python SDK for SuperTokens

HTML · 148 stars
supertokens-web-js
SuperTokens SDK for vanilla JS for all recipes

TypeScript · 70 stars
supertokens-website
Frontend SDK for SuperTokens - for session management + automatically refreshing sessions

JavaScript · 52 stars
docs
SuperTokens documentation

TypeScript · 46 stars
supertokens-ios
iOS SDK for SuperTokens

Swift · 14 stars
supertokens-nestjs

TypeScript · 13 stars
blog
Adding a blog to supertokens.com

JavaScript · 9 stars
supertokens-plugin-interface
Plugin interface for communication between the core and plugins

Java · 6 stars
supertokens-root
Repository used for development purposes of the core, plugins and plugin-interface

Shell · 5 stars
supertokens-postgresql-plugin
Plugin for the core to interface with a postgresql database.

Java · 5 stars
actions
Collection of actions for use in SuperTokens workflows

TypeScript · 0 stars
jre
JRE used for SuperTokens core

0 stars

Beginner friendly Everything

Open All

Webserver: expose concurrency-cap rejections and in-flight count in RequestStats; rate-limited WARN Open

agent-wip

Difficulty 3/5 1-2 days Newbie friendliness 64/100

supertokens/supertokens-core#1440 · Opened Sep 18, 2026
Webserver: per-CUD cap on in-flight requests, enforced only while the pool is saturated (429) Open

agent-wip

Difficulty 5/5 Over a week Newbie friendliness 35/100

supertokens/supertokens-core#1439 · 2 comments · Opened Sep 18, 2026
Add numeric verification code support to EmailVerification Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 40/100

supertokens/supertokens-core#1421 · Opened Sep 9, 2026
Last-active fold reads semantic activity events instead of user_last_active Open

agent-autofix agent-review agent-stale

Difficulty 4/5 3-5 days Newbie friendliness 52/100

supertokens/supertokens-postgresql-plugin#398 · Opened Aug 31, 2026
`pkce-challenge@3` pulls the unmaintained `crypto-js` into every install Open

Difficulty 3/5 1-2 days Newbie friendliness 64/100

supertokens/supertokens-node#1063 · Opened Aug 27, 2026
Single structured source of truth for table definitions (drive DDL, createTablesIfNotExists and schema verification from one registry) Open

Difficulty 5/5 Over a week Newbie friendliness 35/100

supertokens/supertokens-postgresql-plugin#385 · Opened Aug 25, 2026
SAML: clarify intended handling of responses containing multiple assertions Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

supertokens/supertokens-core#1359 · Opened Aug 7, 2026
Adopt CDI 5.5 session semantics Open

agent-wip

Difficulty 4/5 3-5 days Newbie friendliness 45/100

supertokens/supertokens-node#1061 · 1 comment · Opened Jul 24, 2026
Optional access token validity parameter on session create and refresh (CDI 5.5) Open

agent-stale

Difficulty 4/5 3-5 days Newbie friendliness 48/100

supertokens/supertokens-core#1305 · Opened Jul 24, 2026
Stateless session verification: no writes, no replacement tokens (CDI 5.5) Open

agent-stale

Difficulty 4/5 3-5 days Newbie friendliness 45/100

supertokens/supertokens-core#1302 · Opened Jul 24, 2026
Add reusable dev-sync workflow (changie version computation + release PR) Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

supertokens/actions#8 · Opened Jul 15, 2026
Add reusable lint-pr workflow (semantic PR title + changelog fragment check) Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

supertokens/actions#7 · Opened Jul 15, 2026
Header-based auth: allow configuring the `Secure` attribute for frontend-managed cookies Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

supertokens/supertokens-website#279 · Opened Jul 7, 2026
Please bump `pycryptodome` to latest. Open

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

supertokens/supertokens-python#638 · Opened Jul 1, 2026
TryRefreshPage fires getRedirectURLToContinueOAuthFlow twice when session refresh emits two context updates causes "consent verifier already used" in downstream OAuth clients Open

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

supertokens/supertokens-auth-react#925 · Opened Jun 11, 2026
java.lang.NoClassDefFoundError on arm64 architecture with version 11.x Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 45/100

supertokens/supertokens-core#1282 · 3 comments · Opened Jun 8, 2026
Export all response-related constants and types Open

Difficulty 3/5 1-2 days Newbie friendliness 52/100

supertokens/supertokens-node#1048 · Opened Jun 2, 2026
TypeInput and SuperTokensModuleOptions are incompatible Open

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

supertokens/supertokens-nestjs#25 · Opened May 31, 2026
Auth-react E2E spec multitenancy.tenant_interactions is flaky on most FDI versions Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

supertokens/supertokens-python#635 · Opened May 5, 2026
Migrate unit tests to app-based testing model Open

Infrastructure

Difficulty 5/5 Over a week Newbie friendliness 35/100

supertokens/supertokens-golang#441 · Opened Mar 18, 2026
Update action references to new supertokens/actions monorepo Open

Difficulty 1/5 Under an hour Newbie friendliness 88/100

supertokens/supertokens-core#1239 · 1 comment · Opened Mar 17, 2026
Update action references to new supertokens/actions monorepo Open

Difficulty 2/5 1-3 hours Newbie friendliness 52/100

supertokens/supertokens-web-js#145 · Opened Mar 17, 2026
Update action references to new supertokens/actions monorepo Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

supertokens/supertokens-auth-react#924 · Opened Mar 17, 2026
Update action references to new supertokens/actions monorepo Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

supertokens/supertokens-python#632 · Opened Mar 17, 2026
Update READMEs to document actual inputs/outputs for all actions Open

documentation

Difficulty 4/5 3-5 days Newbie friendliness 52/100

supertokens/actions#6 · Opened Mar 17, 2026
Add real tests for TypeScript actions (replace dummy/template tests) Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 48/100

supertokens/actions#5 · Opened Mar 17, 2026
Harden bash scripts in composite actions (quoting, set -e, error logging) Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 55/100

supertokens/actions#4 · Opened Mar 17, 2026
Bug: get-versions-action webJsReact functions use wrong fetch details (copy-paste error) Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 55/100

supertokens/actions#3 · Opened Mar 17, 2026
Have you considered updating the aiosmtplib dependency to a version greater than or equal to 5.0.0? Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

supertokens/supertokens-python#625 · Opened Feb 24, 2026
Optimize unlinkAccounts (after db schema rework): shortcircuit removeAccountInfoReservation for single-login-method primary user Open

Difficulty 3/5 1-2 days Newbie friendliness 55/100

supertokens/supertokens-core#1225 · Opened Feb 19, 2026
https://github.com/supertokens/docs/issues/563 Open

Difficulty 5/5 Over a week Newbie friendliness 10/100

supertokens/docs#1055 · 2 comments · Opened Feb 6, 2026
Documentation on website is broken Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

supertokens/docs#1053 · Opened Dec 27, 2025
Nodemailer Vulnerability Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

supertokens/supertokens-node#1037 · 5 comments · Opened Dec 1, 2025
Sudden Memory Footprint Increase After Upgrading Supertokens Version Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

supertokens/supertokens-core#1194 · Opened Oct 15, 2025
Add option to control the role verification rule used in the Auth Guard (includesAll, includesAny) Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

supertokens/supertokens-nestjs#18 · 1 reaction · Opened Oct 13, 2025
several db hosts Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

supertokens/supertokens-postgresql-plugin#284 · Opened Sep 22, 2025
SAST Vulnerabilities found on packages Open

Difficulty 3/5 1-2 days Newbie friendliness 42/100

supertokens/supertokens-core#1188 · 2 comments · Opened Sep 17, 2025
*.supertokens.com ssl certificate expired Open

Difficulty 4/5 3-5 days Newbie friendliness 20/100

supertokens/supertokens-node#1027 · Opened Sep 8, 2025
Possible race condition in fetch interceptor Open

supertokens/supertokens-website#276 · 1 assignee · Opened Sep 6, 2025
Error signing up when optional formFields are `null` Open

Difficulty 2/5 1-3 hours Newbie friendliness 65/100

supertokens/supertokens-node#1026 · Opened Sep 3, 2025
Ideas for blog design 💡🎨 Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

supertokens/blog#447 · Opened Sep 1, 2025
override_global_claim_validators TypeError: <lambda>() takes 2 positional arguments but 3 were given Open

Difficulty 3/5 1-2 days Newbie friendliness 25/100

supertokens/supertokens-python#612 · Opened Aug 13, 2025
Typing for `getRedirectionURL` should allow synchronous methods Open

Difficulty 1/5 Under an hour Newbie friendliness 76/100

supertokens/supertokens-auth-react#907 · 1 comment · Opened Aug 2, 2025
Can't use next.js basePath configuration attribue Open

Difficulty 4/5 3-5 days Newbie friendliness 32/100

supertokens/supertokens-auth-react#905 · Opened Jul 29, 2025
supertokensUIInit doc is wrong Open

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

supertokens/docs#1013 · 2 comments · Opened Jul 22, 2025
Force refreshing acces token Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

supertokens/supertokens-ios#72 · Opened Jul 7, 2025
Full override of SignIn/SignUp in Nodejs restricted by AuthUtils Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

supertokens/supertokens-node#1017 · Opened Jul 2, 2025
Passkey support Open

Difficulty 5/5 Over a week Newbie friendliness 20/100

supertokens/supertokens-golang#436 · 2 comments · Opened Jul 1, 2025
CSP for dashboard requires `'unsafe-inline'` Open

Difficulty 4/5 3-5 days Newbie friendliness 35/100

supertokens/supertokens-node#1016 · Opened Jul 1, 2025
AB Testing for blogs Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

supertokens/blog#425 · Opened Jun 25, 2025

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

supertokens

Showing the newest 100

Get new issues in your inbox