@samvitjatiachecks…codex/disable-magic-links → master17 files · +124 −1410review: @sohamganatrareview: @kaavee315review: @anshugarg15updated 2w agoDisable magic-link authentication across Apollo and Retool. This removes the Better Auth magic-link plugin, makes legacy user/MCP magic-link endpoints return 403, makes v3.1 agent magic-link endpoints return 403, disables the internal admin login-link endpoint, and blocks Retool magic-link generation. The shared Apollo email helper now returns a disabled error so future accidental callers do not issue links.
Dashboard changes are in the companion dashboard PR.
git diff --check passed locally.signIn.magicLink, magicLinkClient, Better Auth magicLink(), Email.sendNewJoinMagicLink, direct DB_MAGIC_LINK.new, and prisma.magicLink.create). Remaining matches are disabled route registration or the low-level DB utility.oxlint, tsgo, vitest).