I read this and thought I may have a solution to help out, its a way for both recovery tokens and magic link token capture, you can then do what you need in a workflow and build and email an auto login etc.
I posted a new post on it in tips, however, everyone need to be cautious with this approach.
