Magic Link Pitfalls
Evan Todd wrote "Magic Link Pitfalls," an article going over some of the errors he's seen in sites that mail a passthrough link to log in to users. The idea is simple: to "log in" you say "send me a link," a link gets generated and sent, the user clicks a link, and they're logged in. But there're problems with this approach: they can be avoided, but not without taking care.
→