Auth helper .signInWithPassword returns 401 unauthorized in Local Environment / CLI

[riccardolardi]

I'm getting POST http://localhost:54321/auth/v1/token?grant_type=password 401 (Unauthorized) when using signInWithPassword() in a local environment using Supabase CLI. It works in remote Supabase though.

The fetch/XHR payload is: { "email": "test", "password": "test", "gotrue_meta_security": {} }

The request URL is http://localhost:3000/#access_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJhdXRoZW50aWNhdGVkIiwiZXhwIjoxNjc5ODQ2Njg5LCJzdWIiOiIzOGE4MTJjMi02MzIzLTRkZGQtYjlmYi0yNTk2ZDI3N2I3NGUiLCJlbWFpbCI6InJpY2NhcmRvLmxhcmRpQGdtYWlsLmNvbSIsInBob25lIjoiIiwiYXBwX21ldGFkYXRhIjp7InByb3ZpZGVyIjoiZW1haWwiLCJwcm92aWRlcnMiOlsiZW1haWwiXX0sInVzZXJfbWV0YWRhdGEiOnt9LCJyb2xlIjoiYXV0aGVudGljYXRlZCIsImFhbCI6ImFhbDEiLCJhbXIiOlt7Im1ldGhvZCI6Im90cCIsInRpbWVzdGFtcCI6MTY3OTg0MzA4OX1dLCJzZXNzaW9uX2lkIjoiOTNhMzM3YWQtOWZmMy00NGY4LTgxM2EtODFkN2NlNGU1ZDI2In0.tGE5qIs86KwwQhGYoYOVzT8Cw3JapcN5fw7ZTD16h8k&expires_in=3600&refresh_token=0yt9L4RXtDyLBWmjF2MZBw&token_type=bearer&type=invite

Any clue why this happens?