---
title: "Api Magic Login"
method: GET
path: "/auth/magic-login"
---

# Api Magic Login

`GET /auth/magic-login`

## Request

- Base URL: `https://deepbluealpha.io` (the document declares no server; this is the origin it was published from)
- URL: `https://deepbluealpha.io/auth/magic-login`
- Auth: none declared

One-time magic-login link (no password required). Used for account-recovery
flows where we need to give a paying member access without making them deal
with a password reset.

The token is a JWT signed by JWT_SECRET with `type='magic_login'`. On success
we issue a fresh standard auth JWT (same kind /auth/login returns) and set
the `dba_token` cookie, then redirect to `/`. On failure we redirect to
`/login?error=...` rather than returning a JSON 401, because the user is
coming from a click in chat / Telegram and a redirect feels cleaner.

## Query parameters

- `token` string, required

## Response `200`

Successful Response

- unknown

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/deepbluealpha/apis/deep-blue-alpha.md) · [All operations](https://skmtc.dev/deepbluealpha/apis/deep-blue-alpha/llms.txt) · [OpenAPI document](https://skmtc.dev/deepbluealpha/apis/deep-blue-alpha/revisions/f56e32e6aa71?raw)