p2-inc / keycloak-magic-link

Magic Link Authentication for Keycloak
https://phasetwo.io
Other
231 stars 46 forks source link

Navigating on used magic link occurs login into account #36

Closed hookenful closed 1 year ago

hookenful commented 1 year ago

Hello !

Is it possible to disable logging to account when navigating to already used magic link? Because someone who has access to user email, can have access to user's account

xgp commented 1 year ago

The expiration time can be set on the magic link, but a single use option is not currently supported.