
Magic-link sign-in now uses a claim that can be consumed only once and is tied to the organization. After verification, sign-in creates a separate staff session.
The link’s sign-in state is no longer reused as the session token. This separates the one-time sign-in step from ongoing access to the workspace.
Available in erxes v3.4.7, released October 29, 2026.