Bug Description
In internal/graphql/verify_email.go:137-140, loginMethod is assigned AuthRecipeMethodBasicAuth then immediately compared to VerificationTypeMagicLinkLogin. This condition is always false since these are different constants.
Impact
LOW — Magic link login via VerifyEmail always uses the wrong login method (BasicAuth instead of MagicLinkLogin).
Fix
Check verificationRequest.Identifier instead of loginMethod to determine the verification type.
Bug Description
In
internal/graphql/verify_email.go:137-140,loginMethodis assignedAuthRecipeMethodBasicAuththen immediately compared toVerificationTypeMagicLinkLogin. This condition is always false since these are different constants.Impact
LOW — Magic link login via VerifyEmail always uses the wrong login method (
BasicAuthinstead ofMagicLinkLogin).Fix
Check
verificationRequest.Identifierinstead ofloginMethodto determine the verification type.