[ejs]

I usually implement the whole username/password auth flow, but recently used only magic links for a simple application.

Since the application only sends a weekly email (a markdown template for goal/task tracking) it seemed easier to just use a magic link, only.

I am happy at how much easier the auth code ended up, and fail to see much downside for such an application.

I'm not sure it would be a good system for more complex apps and services.

[benoliver999]

I have a system where users log in extremely infrequently. Tempting to move away from username & password because they just reset every time anyway.

[ejs]

Yeah - that's my thought too, the service I use them for is not something people often log into. Sometimes never.