Customizing Magic Link
Customize your magic link authentication flow from the Descope console (Settings > Authentication Methods > Magic Link).
A magic link is a single-use link sent to the user for authentication (sign-up or sign-in) that validates their identity. The Descope service can send magic links via email or SMS texts.
The browser tab that is opened after clicking the magic link gets the authenticated session cookies. For example, consider a user that starts the login process on a laptop browser and gets a magic link delivered to their email inbox. When they click the email link, a new browser tab will open and they will be logged in on the new tab.
Settings Summary
All Settings
Variables are displayed below and in the console as {{variable_name}}.
| Setting | Variable | Details |
|---|---|---|
| Redirect URL | {{redirectUrl}} | default URL for the route you implement to verify magic link tokens |
| Expiration time | {{expirationTime}} | length of time after which link or code expires |
| Connector | Who will be listed as the sender of the magic link. The default is Descope. | |
| Template | If you are using a customized connector, you can change the template of the email/sms which your user will receive. The default is System. | |
| Enable method in API and SDK | This toggle switch enables or disables the authentication method from being available for use within API and SDK |
Additional Details
This section describes additional details about the configuration options available.
Redirect URL
The redirect URL is an optional argument in the API and SDKs, and will take precedence over the redirect URL configured here.
Expiration Time
For increased security, we recommend an expiration time of 3-5 minutes. A shorter expiration time limits how long a malicious actor has to attempt an attack (such as a dictionary or brute force attack) on the code or link.
Connectors
Email Connector
Descope supports utilizing your email connector. Currently, SMTP connectors and Sendgrid connectors are supported. You can configure an email connector by going to the applicable authentication method within the Descope console and clicking on the Email Connector, clickingadd Sendgrid connector or add SMTP connector and configuring the necessary information.Text Message (SMS) Connector
Descope supports utilizing your own Twilio account to send Text Messages. You can configure a Twilio connector by going to the applicable authentication method within the Descope console, then clicking on the Text Message Connector, and then clickingadd Twilio connector. You can then select the authentication method to authenticate with Twilio. The options for the connection auth method are AuthToken or API Key.