Skip to main content

Magic Link Resend Throttling & Rate Limiting

I noticed that the magic-link resend endpoint can be repeatedly triggered without any visible throttling or friction layer. This could lead to automated email flooding and weak identity verification during onboarding/waitlist flows. I'm happy to take a deeper look at the full onboarding + auth chain and flag anything concrete if useful.

Log in to comment and vote

No comments yet

Be the first to share your thoughts.