I usually implement the whole username/password auth flow, but recently used onl... | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

ejs 4 months ago | parent | context | favorite | on: Magic/tragic email links: don't make them the only...

I usually implement the whole username/password auth flow, but recently used only magic links for a simple application.

Since the application only sends a weekly email (a markdown template for goal/task tracking) it seemed easier to just use a magic link, only.

I am happy at how much easier the auth code ended up, and fail to see much downside for such an application.

I'm not sure it would be a good system for more complex apps and services.

benoliver999 4 months ago [–]

I have a system where users log in extremely infrequently. Tempting to move away from username & password because they just reset every time anyway.

ejs 4 months ago | [–]

Yeah - that's my thought too, the service I use them for is not something people often log into. Sometimes never.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact