Login With Magic Link
Magic links are a form of passwordless logins where users click on a link sent to their email address to log in to their accounts. Magic links only work with email addresses and are one-time use only. By default, a user can only request a magic link once every 60 seconds and they expire after 1 hour.
Set up Magic Link logins for your Supabase application.
- Enable the email provider in your Supabase Project
- Configure the Site URL and any additional redirect URLs in the authentication management tab.
- The Site URL represents the default URL that the user will be redirected to after clicking on the email signup confirmation link.
- If a user has not signed up yet, signing in with a magic link will automatically sign up the user. To prevent users from signing up through magic links, you can set the
shouldCreateUseroption tofalse.
Sign in with magic link
When using Magic Links in the PKCE Flow, keep in mind that links can only be opened from the same browser that they are sent from (as defined in the PKCE spec). Consequently, a magic link sent from Chrome on Desktop will be invalid if used on a Mobile Device.
The same applies for Magic Links in mobile devices. Magic Links can only be opened on the device they are sent from.