Add passwordless email "magic link" auth

[weepy]

It would be great to add this / have a guide for it

[pilcrowonpaper]

Something we're looking into is adding tokens to Lucia. This will make it easier to create and validate tokens for verification links and one-time passwords. When that's completed, I think we can something similar to OAuth integration.

[khromov]

@pilcrowonpaper I saw that magic links have a guide now, this is great. I would like to be able to log the user in only via magic link or verification code, without any passwords involved at all. Is this possible with Lucia?

https://lucia-auth.com/guidebook/email-verification-links/

[deadcoder0904]

@khromov it is possible. i do just that -> https://github.com/deadcoder0904/next-13-lucia-auth-drizzle-turso-sqlite-magic-link

[weepy]

i'm wrote this - just about to test it => ``` import MagicLinkModel from "$lib/server/models/MagicLinkModel.js" import crypto from 'crypto' import { nanoid } from "nanoid"; class MagicLink { constructor(auth, configs) { this.auth = auth; this.callbackUrl = configs.callbackUrl; this.authSecret = configs.authSecret } auth; getAuthorizationUrl = async (email) => { email = email.trim().toLowerCase() const id = nanoid(20) const model = await MagicLinkModel.create({ _id, email }) return this.callbackUrl + "/?code=" + id; }; validateCallback = async (code) => { const magiclink = await MagicLinkModel.findById(code) if(!magiclink) { throw Error("no such") } const { email } = magiclink const hash = crypto.createHash('md5').update('some_string').digest("hex") const magiclinkUser = { picture: "https://www.gravatar.com/avatar/" + hash, email } let existingUser = null; try { existingUser = await this.auth.getUserByProviderId("magiclink", email); } catch { // existingUser is null } return { createUser: async (userAttributes = {}) => { return await this.auth.createUser("magiclink", email, { attributes: userAttributes }); }, existingUser, providerUser: magiclinkUser }; }; } const magiclink = (auth, configs) => { return new MagicLink(auth, configs); }; export default magiclink;

…

On Fri, Dec 16, 2022 at 12:27 PM pilcrowOnPaper ***@***.***> wrote: Something we're looking into is adding tokens to Lucia. This will make it easier to create and validate tokens for verification links and one-time passwords. When that's completed, I think we can something similar to OAuth integration. — Reply to this email directly, view it on GitHub <#257 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAAAGNC5G7OJ6J2ZQKMMMVTWNRG27ANCNFSM6AAAAAATATE6A4> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>

[nickisnoble]

Did it work?

[deadcoder0904]

@pilcrowonpaper would love this in v3 guides. passwordless login is very common as a developer. hate it as a user though as i can't use password manager.

edit: it is already there. just the docs are missing a search function 🤜 https://v3.lucia-auth.com/guides/email-and-password/email-verification-codes