Short answer
Supabase Auth refuses example and test domains, so test@example.com or a .test address fails on purpose. Test with a real inbox you control. If a real customer’s address is refused, check for a typo in the domain and that the domain can receive mail. If the error says Email address not authorized instead, that is the default email service’s team-only limit: set up custom SMTP.
Why the address is refused
01
A test or example address
“Example and test domains are currently not supported. Use a different email address.” Supabase, Auth error codes
Addresses on example.com, test.com, .test, .example, .local and similar reserved names are refused, as are a few test addresses people type often. Use a real inbox for testing, or a plus address on your own domain.
02
A typo in the domain
Supabase Auth’s open-source code also refuses common misspellings of big email domains, such as gamil.com. Show people the address back with a short hint to check it, rather than the raw error.
03
The domain can’t receive mail
Supabase Auth’s code can also check that the domain has mail servers set up. A new company domain without mail records, or a misspelled one, fails this way. Check the domain’s MX records before suspecting the app.
04
Not the same as “Email address not authorized”
“Unless you configure a custom SMTP server for your project, Supabase Auth will refuse to deliver messages to addresses that are not part of the project's team.” Supabase, Send emails with custom SMTP
If the message says not authorized, the address is fine: the project is still on Supabase’s default email service, which only sends to team members. Set up custom SMTP before launch.
Checked against the vendor’s docs on : Supabase docs: Auth error codes; Supabase docs: Send emails with custom SMTP.
Rather hand it over?
Fixed scope, fixed price, paid upfront. The work happens in writing; no call needed.
- from $450App Fix TicketOne reproducible bug in an existing mobile or web app, diagnosed and fixed.See scope and start
- from $450AI-Built App RescueA Lovable, Bolt or Cursor app checked end to end in 3 days, then its worst problems fixed at a fixed price.No issues worth fixing, no charge. If the Launch Check finds nothing rated medium or higher, Simon refunds the full $450. You keep the report either way.See scope and start
Related: Supabase auth emails going to spam · Supabase email rate limit exceeded · Supabase Signups not allowed for this instance · Supabase Email link is invalid or has expired