Navigation
Email Link Sign-in (Passwordless)
For a frictionless and secure login experience, we support passwordless authentication using secure email links (also known as Magic Links), powered by our authentication service.
Sign-in Sequence
- Enter Email: You submit your email address on our passwordless login page.
- Send Request: A request is sent securely to our authentication service.
- Cache Session: The system securely caches the email in your browser to verify session persistence.
- Verify Link: You click the link in your email, redirecting you back to our application.
- Complete Login: Our authentication service validates the link parameters, establishes your session, and signs you in.
Security Advantages
- No Passwords to Remember: Eliminates password fatigue and prevents credential reuse vulnerabilities across different sites.
- Built-in Email Verification: Successfully signing in via email link automatically verifies that you own the email address.
- Secure Link Lifespan: Verification links are valid for a limited period and expire immediately after use, preventing session interception.
Key Requirements & Technical Details
| Aspect | Specification / Rule |
|---|---|
| Link Lifespan | Links are valid for a limited period or until first successful verification. |
| Same Device Context | For the best experience, click the link on the same browser/device that requested it. If clicked on a different device, you may be prompted to re-verify your email address during the redirect flow. |
| Spam Prevention | Rate limiting is enforced on link request endpoints to prevent spamming and abuse of email APIs. |