Re use same password less email link

Hi

We have a user that have a server that checks all his email and click on every link. So so email link he is receiving is invalid.

I can’t find an option to make the link living longer and more than one click?

Regards,

Stéphane

Hi @stefdelec,

Unfortunately, this is a known issue. We do not have any option to allow more than one click. We are working on this and might have a solution soon.

Our usual recommendation is to host a landing page which takes the magic link in a query string and returns HTML with a GET form that auto-submits to the actual verification endpoint. So instead of a bare magic link the email message will contain something like https://yourapp.com/bypass?link=<the_actual_target>, which you can change in the email HTML for the passwordless connection. The email scanner should stop at the landing page and won’t try to submit the form.

Alternatively, the simplest workaround would be to use a code instead of a magic link.

1 Like

which you can change in the email HTML => I can only if I use my own email provider?

It is really painful. We took auth0 to avoid developing a lot of things, but it seems more and more that it was not a good option.

We are working on this and might have a solution soon.=> what time frame?

Yes, you must use your own email provider. Actually, not only for customizing email templates but for any production tenant. Auth0’s built-in email infrastructure should be used for testing emails only.

If you find it cumbersome or inconvenient to configure a proper email provider for development/testing purposes, you may find useful some email fake providers such as https://mailtrap.io/

1 Like

why that? window.location=link would not do the trick?

I tried this code but it does not work: I have an auth0 error page:

<!DOCTYPE html>
<html>

  <body>
<form name="myForm" id="myForm" action="test.php" method="GET">
    
</form>

<script type="text/javascript">
    window.onload=function(){
      const urlSearchParams = new URLSearchParams(window.location.search);
      const paramToRedirect=urlSearchParams.get('r');
      if(paramToRedirect){
            document.forms["myForm"].action=paramToRedirect
              document.forms["myForm"].submit();
      }else{
      alert("an error occured. Please contacvt arianee")
      }
    }
</script>
</body>
</html>

And in template email :

 https://myurl.com?r={{link | url_encode }}

This topic was automatically closed 15 days after the last reply. New replies are no longer allowed.