Skip to content

Signing in using magic link with Outlook email when SafeLinks enabled does not work #1840

@dweemx

Description

@dweemx

Describe the bug
Signing in with an Outlook email which is linked to an account where the SafeLinks premium feature is enabled does not work.

Another authentication library seems to have the same issue: FusionAuth/fusionauth-issues#629.
When this Outlook feature is enabled, the magic link is encapsulated by a SafeLinks Outlook protection URL, e.g.:

https://eur02.safelinks.protection.outlook.com/?url=<magic-link-url>

From the issue in FusionAuth, it seems that the token gets invalidated because of some request that SafeLinks is being made beforehand. (Source: FusionAuth/fusionauth-issues#629 (comment))

Steps to reproduce

  1. Sign in with Outlook email which has SafeLinks enabled
  2. Click on Sign link from email

Expected behavior
User should be able to login

Screenshots or error logs
None. The user gets redirected to /auth/sign-in?error=Verification

Additional context
/

Feedback

  • Found the documentation helpful
  • Found documentation but was incomplete
  • Could not find relevant documentation
  • Found the example project helpful
  • Did not find the example project helpful

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestprovidersstaleDid not receive any activity for 60 days

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions