News for hackers. Stuff that matters.

A comment on Magic/tragic email links: don't make them the only option. Parent comment

Re:Magic/tragic email links: don't make them the only option by Macha on Tuesday January 07, 2025 @06:40PM (#42629082)
Surely this breaks the "email is not on same device as login" use case? At least with normal magic links, they're merely incredibly annoying but doable (via e.g. typing in the URL)
[ Parent | on HN ]
Re:Magic/tragic email links: don't make them the only option by paxys on Tuesday January 07, 2025 @07:25PM (#42629457)
That use case still works. In fact it works better because if you click the link on your phone you don't automatically get logged in on your phone browser (or your email client's in-app browser). You can then copy the same link on your desktop and it will work as expected.
[ Parent | on HN ]
Re:Magic/tragic email links: don't make them the only option by apitman on Wednesday January 08, 2025 @01:24AM (#42631568)
I'm confused. How do you get the cookie from the original device to the other device?
[ Parent | on HN ]
Re:Magic/tragic email links: don't make them the only option by paxys on Wednesday January 08, 2025 @09:31AM (#42634628)
It's the other way around. You copy the URL to the device that has the cookie.
[ Parent | on HN ]
Re:Magic/tragic email links: don't make them the only option by apitman on Wednesday January 08, 2025 @12:02PM (#42636168)
How do you copy the link between devices? QR code?
[ Parent | on HN ]
Re:Magic/tragic email links: don't make them the only option by shakna on Tuesday January 07, 2025 @08:51PM (#42630057)
As long as you also have a code to enter, then things will feel fine across devices.
[ Parent | on HN ]