I want to add that I can reliably reproduce this if I use my app on one browser (say, Safari) and open my magic link in another browser (say, Chrome). It seems like a design flaw that auth0 would require magic links to open in the same browser from which they were sent (if indeed there’s a requirement to read from browser storage as others have suggested). Is there a way to workaround this? I’m not sending state right now, should I be?