search

mikker / passwordless

🗝 Authentication for your Rails app without the icky-ness of passwords
MIT License
1.26k stars 85 forks source link

Return 200 on HEAD requests to not invalidate tokens #151

Closed mikker closed 1 year ago

mikker commented 1 year ago

Some email clients send preliminary requests to links to check for safety. We don't want that to invalidate tokens.

See also https://next-auth.js.org/tutorials/avoid-corporate-link-checking-email-provider