How to create a passwordless magic link in advance? (Auth by link)

So I’ve come up with a somewhat(?) viable solution.

What do you think, could that work?

  • Generate a password reset link via the management API
  • Encode that in a QR code
  • User scans code, sets password
  • return URL includes auth0 user ID → user may update auth0 account with e-Mail
  • log in user

Would all be easier if we had emails for those users but we don’t always.