How are magic links secured?

Magic links use JWT (JSON Web Tokens) signed with a secret key:

• Each token contains the patient ID, appointment ID, form IDs, and organization ID
• Tokens expire after 7 days
• No login or account creation required for patients
• Tokens are single-use for appointment-based intake