get-convex / convex-auth

Library for built-in auth
https://labs.convex.dev/auth
51 stars 15 forks source link

Explain how to do both OTP and magic link #22

Open xixixao opened 3 months ago

xixixao commented 3 months ago

It's complicated because magic links rely on long tokens. So security-wise the ideal approach is to generate two different codes, one for the link and one for the OTP. That's not super easy to do atm, might be simpler to use a custom ConvexCredentials provider.