Passwordless login: Behavior and lifecycle

Defines one-time email-link login from request through expiry, replay protection, cross-device continuation, session creation, and privacy-preserving responses under abuse and delivery failures.

Published Sep 12, 2026