@User Hi, I saw you have responded to a lot of issues regarding Reset Password link. But i'm unable to find solution to my problem. I automatically get authenticated and then the protected routes take over and move to dashboard. How can I stop auto authentication here?

Yeah the reset password flow has changed it seems, so when you click the reset link it actually logs you in as the token that is passed with it authenticates the user, at this point you can show the reset password form and use

.update({ password: new_password })

to update the user's password.

It's been like this for a while I think. One of our engineers discovered this while working on an internal project a few months ago, and I noticed it when working on a project about 6-8 months ago. The magic link and password reset now seem to function very similarly, but the params passed off to your application are different - it's up to you to parse them and redirect the user to the appropriate place.

Yeah I'm going to ask the team if they can update the docs to reflect this, because the docs state it should work differently.