Need for magic code (passwordless) signup

[mukundshah]

While implementing authentication in my toy project, I wanted to prioritize magic code (passwordless) login for better UX and security. However, I discovered that while django-allauth supports magic code authentication for existing users, it doesn't support it for signup.

Has anyone implemented this? Or is they any other way to this?

[pennersr]

Try the latest development (main) branch, and use these settings:

ACCOUNT_SIGNUP_FIELDS = [
    "email*",
]
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_ENABLED = True
ACCOUNT_EMAIL_VERIFICATION = "mandatory"

Then, the signup form will only show a required email field.

[mukundshah]

I'm using the headless API actually; I will give it a try and let you know

[mukundshah]

I tried the following configs

ACCOUNT_LOGIN_METHODS={"email"}
ACCOUNT_SIGNUP_FIELDS=["email*", "password1"]
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_ENABLED = True
ACCOUNT_EMAIL_VERIFICATION = "mandatory"

ACCOUNT_LOGIN_METHODS={"email"}
ACCOUNT_SIGNUP_FIELDS=["email*", "password"]
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_ENABLED = True
ACCOUNT_EMAIL_VERIFICATION = "mandatory"

ACCOUNT_LOGIN_METHODS={"email"}
ACCOUNT_SIGNUP_FIELDS=["email*"]
ACCOUNT_EMAIL_VERIFICATION_BY_CODE_ENABLED = True
ACCOUNT_EMAIL_VERIFICATION = "mandatory"

In all of the cases, I got 400

{
    "status": 400,
    "errors": [
        {
            "message": "This field is required.",
            "code": "required",
            "param": "password"
        }
    ]
}

Here's the cURL for it:

curl 'http://localhost:8000/_allauth/app/v1/auth/signup' \
  -H 'Accept-Language: en-US,en;q=0.9,ru;q=0.8,de;q=0.7,ar;q=0.6' \
  -H 'Connection: keep-alive' \
  -H 'DNT: 1' \
  -H 'Origin: http://localhost:3000' \
  -H 'Referer: http://localhost:3000/' \
  -H 'Sec-Fetch-Dest: empty' \
  -H 'Sec-Fetch-Mode: cors' \
  -H 'Sec-Fetch-Site: same-site' \
  -H 'User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36 Edg/133.0.0.0' \
  -H 'accept: application/json' \
  -H 'content-type: application/json' \
  -H 'sec-ch-ua: "Not(A:Brand";v="99", "Microsoft Edge";v="133", "Chromium";v="133"' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'sec-ch-ua-platform: "Linux"' \
  -H 'x-session-token: e1a08yim9ubrw3glvnhesz83ki5xm3ar' \
  --data-raw '{"email":"[email protected]"}'

[pennersr]

Yeah, I was a little optimistic here. Recently, a lot of refactoring landed to make way for signing up by phone, and even while it is not the goal passwordless signup comes almost for free with that, though there has been zero focus/testing in this regards. Can you try out the latest main branch (2108e51f) -- headless should work now.