setup-auth-magic-link

What problem does it solve?

It solves the challenge of implementing passwordless authentication in a way that is secure, anti-enumeration safe, and production-ready for FastAPI backends with a React frontend.

Core Features & Use Cases

• Magic Link flow end-to-end: email-based single-use login that exchanges a verified link for HttpOnly JWT cookies.
• Token security & integrity: SHA-256 hashing in the database, short expiration, and atomic single-use verification to prevent race-condition replays.
• Safety controls: anti-enumeration responses, email/IP rate limiting, token cleanup strategy, and security headers/CORS aligned with the classic JWT auth setup.
• Frontend integration: /login (email only) and /auth/verify (reads token from URL and calls the verify endpoint with credentials included).

Quick Start

Ask the AI to implement Magic Link authentication for your FastAPI + React app following the secure flow (request link, verify token single-use, set HttpOnly JWT cookies, and add the React login/verify routes).