Bug Description

In internal/graphql/verify_email.go:137-140, loginMethod is assigned AuthRecipeMethodBasicAuth then immediately compared to VerificationTypeMagicLinkLogin. This condition is always false since these are different constants.

Impact

LOW — Magic link login via VerifyEmail always uses the wrong login method (BasicAuth instead of MagicLinkLogin).

Fix

Check verificationRequest.Identifier instead of loginMethod to determine the verification type.