Sign In with One-Time Passwords

One-Time Passwords (OTPs) are temporary codes for single use that can be delivered to users via email. OTPs expire after 5 minutes and can only be used once. OTPs can provide a more secure and convenient alternative to regular passwords.

To use One-Time Passwords, they need to be enabled in the configuration:

[auth.method.otp.email]
enabled = true

[auth.method.otp.email]
enabled = true

After the functionality has been enabled the flow is as follows:

1. User requests an OTP:

nhost.auth.signInEmailOTP('user@example.com')

nhost.auth.signInEmailOTP('user@example.com')

nhost.auth.signInEmailOTP(email: "user@example.com");

2. User receives an email with the OTP
3. User enters the OTP

nhost.auth.verifyEmailOTP('user@example.com', '123456')

nhost.auth.verifyEmailOTP('user@example.com', '123456')

nhost.auth.verifyEmailOTP(email: "user@example.com", otp: "123456");