![]() ![]() I have this same problem with lastpass emails. Thanks - we don't work with the teams that own the safelinks product but will be happy to ask around internally to see what we can find. If you want to update your template to add these additional parameters as outlined in the stock template example and then retry, I would expect it to fail as it does now, but with a different error. In the new templates, we are jamming all of the values on the URL as well so that if the code is expired, we can in most cases allow you to restart the workflow. This is happening today, and if the code is used, and then on a second request the code is invalid we cannot lookup the state to complete login, hence the error you're seeing about an invalid redirect_uri (I think). The first is that we save off all of the state and then look it up with the passwordless code at the time of use. ![]() One way to confirm this - in our updated templates, we are using a two prong approach to preserve the necessary information to complete login. It isn't clear if they are making a GET request to the URL ahead of time, but it seems likely they would have to do that in order to perform necessary checks. Interesting, your b) hypothesis seems plausible. We have two hypothesis as to what might be causing this:Ī) The passwordless code is somehow distorted as it is URL path encoded and decoded by the safe-links mechanism.ī) The safe-links mechanism makes a GET request to the magic link, thus using the code and making it invalid for future requests. If we do, then the magic links work as expected. The "safe-links" feature can be turned off (see the last screenshot). (Please complete the following information) The magic link works and the user is authenticated Screenshots Ask for a magic link to be delivered to the outlook email address.Register a user with the (or email address.By tweaking the email template to include the client_id and redirect_uri, we get a different error, stating that the magic link is invalid or expired. Using the standard email templates, we got a rather cryptic error message, stating that the redirect_uri was missing. In our testing, this appears to break magic links. Outlook will rewrite email links to direct them towards with the original url encoded as a query parameter, when a feature named "safe links" is enabled. Magic links don't work when Outlook "safe links" are enabled Description ![]()
0 Comments
Leave a Reply. |