# Supabase Auth: Identity Linking, Hooks, and HaveIBeenPwned integration

DevFeed: [Supabase Auth: Identity Linking, Hooks, and HaveIBeenPwned integration](<https://devfeed.tech/articles/supabase-auth-identity-linking-hooks-and-haveibeenpwned-integration-581.md>)

Original publisher: [Read original article](<https://supabase.com/blog/supabase-auth-identity-linking-hooks>)

Author: Stojan Dimitrovski; Joel Lee; Kang Ming Tay

Published: 2023-12-14T07:00:00Z

Content type: release

Language: en

Sources: [Supabase Blog](<https://devfeed.tech/sources/supabase-blog.md>)

Topics: [Supabase](<https://devfeed.tech/topics/supabase.md>), [Authentication](<https://devfeed.tech/topics/authentication.md>), [API](<https://devfeed.tech/topics/api.md>), [OAuth](<https://devfeed.tech/topics/oauth.md>), [passwords](<https://devfeed.tech/topics/passwords.md>)

Tags: [api](<https://devfeed.tech/tags/api.md>), [authentication](<https://devfeed.tech/tags/authentication.md>), [integration](<https://devfeed.tech/tags/integration.md>), [new-features](<https://devfeed.tech/tags/new-features.md>), [oauth](<https://devfeed.tech/tags/oauth.md>), [passwords](<https://devfeed.tech/tags/passwords.md>), [pitfalls](<https://devfeed.tech/tags/pitfalls.md>)

## AI overview

Supabase announces four Supabase Auth features: Identity Linking, Session Control, Leaked Password Protection, and Auth Hooks with Postgres functions. Identity Linking lets developers manually link or unlink identities, including OAuth identities, while Session Control adds time-boxed sessions, inactivity timeouts, and single-session enforcement. Leaked Password Protection uses the HaveIBeenPwned.org Pwned Passwords API and supports configurable password requirements.

## Source excerpt

Four major Auth features: Identity Linking, Session Control, Leaked Password Protection, and Hooks