1. User enters email → SDK calls POST /auth/email/send
2. Steward sends one email containing the link and companion code
3. User clicks the link or enters the code
4. Your app calls auth.verifyEmailCallback(token, email) or auth.verifyEmailSignInCode(email, code) → session

import { StewardAuth } from "@stwd/sdk";

const auth = new StewardAuth({
  baseUrl: "http://localhost:3200",
  storage: localStorage,
});

const result = await auth.signInWithEmail("user@example.com");
console.log(result);
// { ok: true, expiresAt: "...", challengeId: "...", pollSecret: "..." }

// On your /auth/callback route
const params = new URLSearchParams(window.location.search);
const token = params.get("token");
const email = params.get("email");

const result = await auth.verifyEmailCallback(token, email);
console.log(result);
// {
//   token: "eyJhbGci...",
//   refreshToken: "stwd_rt_...",
//   expiresIn: 900,
//   user: { id: "usr_...", email: "user@example.com", walletAddress: "0x..." }
// }

<StewardLogin
  showEmail          // enabled by default
  showPasskey={false} // hide passkey if you only want email
  showGoogle={false}
  showDiscord={false}
  title="Sign in with email"
/>

import { StewardEmailCallback } from "@stwd/react";

// In your router:
<Route
  path="/auth/callback"
  element={
    <StewardEmailCallback
      onSuccess={(result) => navigate("/dashboard")}
      onError={(err) => console.error("Verification failed:", err)}
      redirectTo="/dashboard"
    />
  }
/>

# Resend API key for sending emails
RESEND_API_KEY=re_xxxxxxxxxxxx

# Sender address (must be verified in Resend)
EMAIL_FROM=auth@myapp.com

# Dedicated HMAC secret for email codes and polling credentials
STEWARD_EMAIL_CODE_SECRET=<32+ random bytes>

# Your app's public URL (used for magic link generation)
APP_URL=https://myapp.com

{APP_URL}/auth/callback?token={token}&email={email}