Supabase Status · History · Incident #6409
ACTIVE INCIDENT401 errors due to JWT rejections
Minor · Started Aug 14, 2026 · 2:23 AM
Supabase Status · History · Incident #6409
ACTIVE INCIDENTMinor · Started Aug 14, 2026 · 2:23 AM
Duration
Ongoing
Severity
Minor
Detection lead
—
User reports
Peak 1/hr
Summary
We continue to monitor progress and are slowly updating each region. Thank you for your patience on this issue.
Started
Aug 14, 2026 · 2:23 AM
Status
Identified
Duration
Ongoing
Severity
Minor
Event timeline
Identified
Aug 14 · 2:23 AM SupabaseWe have identified the root cause of newly refreshed JWTs being rejected by the API, resulting in HTTP 401 errors for affected sessions. We are working on a fix and will provide updates as things progress.
Identified
Aug 14 · 7:53 AM SupabaseOur teams are continuing to work on the fix and rollout is underway for selected customers. We will provide another update as we are applying the fix to all impacted users.
Identified
Aug 18 · 6:38 PM SupabaseFixes for this issue are being sequentially rolled out. The impact of the issue is limited to a subset of new projects that can experience it upon some JWT renewals. We will update the status when all the fix rollouts have completed.
Identified
Aug 20 · 4:37 PM SupabaseAs part of the incident remediation flow, we have separately identified "/lib/aarch64-linux-gnu/libc.so.6: version `GLIBC_2.34' not found" error between 11:15 - 16:24 UTC today affecting PostgREST. This has been fixed and we can see the error rates have subsided.
Identified
Aug 21 · 5:21 PM SupabaseWe are continuing to test and rollout the fixes for intermittent HTTP 401 errors. In most cases, waiting and refreshing is successful. We will monitor eu-central-2 over the weekend and are preparing for the fix to be pushed to all regions starting Monday. Thank you for your patience while we've worked on multiple fixes for this issue.
Identified
Aug 25 · 6:41 PM SupabaseWe are continuing to rollout the fixes for intermittent HTTP 401 errors. In most cases, waiting and refreshing is successful. This fix has been applied to the following regions: ap-east-1 ap-northeast-1 ap-northeast-2 ap-south-1 ap-southeast-1 ap-southeast-2 ca-central-1 eu-central-1 eu-central-2 eu-north-1 eu-west-2 eu-west-3 We will continue rolling out this fix to the remaining regions throughout this week and provide updates as more regions are successful.
Identified
Aug 27 · 5:17 PM SupabasePostgREST 14.17 has now been rolled out to all regions. Some customers have reported that restarting their project after the rollout resolved this issue. To restart your project, go to the General settings page in the dashboard and select Restart project. Please contact our support team if the issue persists after a restart.
Identified
Aug 28 · 11:44 PM SupabaseWe continue to monitor the fixes introduced by this latest rollout. If you are continuing to see these errors, some customers have reported that restarting their project after the rollout resolved this issue. To restart your project, go to the General settings page in the dashboard and select Restart project. Please contact our support team if the issue persists after a restart.
Identified
Aug 31 · 7:52 PM SupabaseWe have seen reports that the JWT rejection issue persisted with 14.17, and due to <a href="https://status.supabase.com/incidents/bv4ntm4x0btf">some unintended performance side effects</a>, we have rolled back to Postgrest 14.5. The team continues to investigate the JWT issue and hopes to have a solution soon.
Identified
Sep 2 · 7:38 PM SupabaseA stale time cache has been identified as the cause of this issue. A targeted fix has been written and is undergoing internal testing. It will be rolled out when testing is complete. Thank you for your patience while we investigated this issue. We will update the status page when the fix is rolled out.
Identified
Sep 7 · 9:49 AM SupabaseTesting results have been positive. Following some additional checks today, we plan to expand the rollout. We’ll continue to monitor progress and provide further updates as they become available.
Identified
Sep 11 · 11:41 PM SupabaseWe continue to monitor progress and are slowly updating each region. Thank you for your patience on this issue.
User reports · incident window
Hourly report count. Red bars mark the incident window.
Peak: 1 reports/hr
Pulsetic catches degradations minutes before vendors acknowledge them.
Stay online, all the time, with Pulsetic's uptime prime.
By Designmodo
Designmodo Inc. 169 Madison Ave, #79627, New York, NY 10016, United States
Copyright © 2010-2026. Pulsetic® is a registered trademark.