Bug: Password Reset and Magic Links Generating Empty URLs (No Tokens)

# Bug report - I confirm this is a bug with Supabase, not with my own application. - I confirm I have searched the [Docs](https://docs.supabase.com), GitHub [Discussions](https://github.com/supabase/supabase/discussions), and [Discord](https://discord.supabase.com). ## Describe the bug Both password reset and magic link emails are generating empty confirmation URLs without any tokens. The `{{ .ConfirmationURL }}` variable is producing empty links. ## To Reproduce 1. Go to Supabase Authentication → Users 2. Click "Send password recovery" for any user 3. Check the email received 4. The link will be: `https://mysite.com/#` (no token attached) 5. Same issue occurs with "Send magic link" ## Expected behavior The confirmation URL should include a token like: `https://mysite.com/#token=abc123&type=recovery` ## Screenshots [Add screenshots of: - Your URL configuration - Email template using {{ .ConfirmationURL }} - The empty link received] ## System information - OS: Windows - Browser: Chrome - Version of supabase-js: Latest - Version of Node.js: 20.15.1 ## Additional context **Project:** DirassaHub **Site URL:** https://dirassahub1.netlify.app **What I've verified:** Site URL correctly configured Redirect URLs include `https://dirassahub1.netlify.app/**` Email provider enabled Templates use proper `{{ .ConfirmationURL }}` syntax Multiple email domains tested (gmail.com, etc.) This is blocking our production deployment as users cannot reset passwords.