Hm. I tried to circumvent this in my proposal.
I understand that links which would log users in directly are dangerous.
But with the suggested mechanism, the only risk I see is users getting unwanted login links sent to them.
1 Like