so I theoretically should see it logged twice?

@shack No, your page will start over from scratch, or goto your redirectTo page. Unless it is just signIn with email/password without confirm, then it will return data and you continue on.

wait so i shouldn't expect the code afterwards to ever be run?

It will run, but is useless except to check for error.

I see. So how would I best go about collecting the token for a cookie on return to the app? I'm using NextJS (+ Refine, if that helps)

I don't use next.js/react. There are some examples in guide page and there is a newer repository with auth helpers than includes next.js stuff https://github.com/supabase-community/auth-helpers Usually you have processing on onAuthStateChange handler to monitor the session being set up by client code.