Passwordless auth (magic link + OTP)

Generated from mcp/patterns.registry.json — do not edit by hand; change the registry and run bun run patterns:build.

Index card — the docs below are the canonical explanation; deep-tier pattern pages additionally carry invariants and emulation notes.

Category: Identity & Access · Tier: light · Risk: medium — external managed service (email delivery)

Session-based authentication through Better Auth using a magic link and OTP code sent together in one email, with no passwords stored.

When to use: Use as the primary sign-in method to avoid password-related breach risk and reset friction.

Docs

• docs/blueprint/auth.md (GitHub · GitLab)
• docs/stack/auth/better-auth.md (GitHub · GitLab)

Code

• src/lib/server/auth/index.ts (GitHub · GitLab)
• src/lib/auth-client.ts (GitHub · GitLab)

Proof

• /showcases/auth/authn

Machine-readable record: identity-passwordless-auth in mcp/patterns.registry.json.