Running through the example, clicking on an already-used magic link email brings me to the magic link “sign in” page, clicking the magic “sign in” button does nothing, though no error warnings are generated as described by debug_authentication setting (a tiny debug message thus: [debug] Claim %{"jti" => "blah blah"} did not pass validation.)

Additionally, trying to use the magic link sign-in with a nonexistent user, will indeed generate the magic link email and associated magic link (which also works when used, creating a new user). Is this expected?

Versions

Erlang/OTP 27 [erts-15.2.7] [source] [64-bit] [smp:8:8] [ds:8:8:10] [async-threads:1] [jit]

Elixir 1.18.4 (compiled with Erlang/OTP 27)