Magic link sign-in
The user enters their email and receives a one-time link. Clicking it creates or resumes a Supabase session. The browser redirects to /dashboard with a persistent cookie.
- No password database to compromise
- Session lasts up to 30 days of inactivity before requiring re-auth
- Works across devices - sign in on mobile with the same email