Loading…

Star4.1kBook a meeting
Changelog

Security: Single-Use Magic-Link Sign-In Claims

Magic-link sign-in now exchanges a single-use, tenant-bound claim for a separate staff session.

magic-link-session-claims.png

Magic-link sign-in now uses a claim that can be consumed only once and is tied to the organization. After verification, sign-in creates a separate staff session.

The link’s sign-in state is no longer reused as the session token. This separates the one-time sign-in step from ongoing access to the workspace.

Available in erxes v3.4.7, released October 29, 2026.

Operate on one system.

Talk to our team about consolidating your stack onto erxes. 30-minute walkthrough, custom to your org.