Testing Passwordless Login Emails in JavaScript Without Inbox Chaos

Passwordless login flows often break in staging due to shared inboxes, expired links, or frontend bugs. A practical test path involves triggering login from the UI, capturing the email in an isolated inbox, and asserting the authenticated state. Key assertions include verifying exactly one fresh link, correct domain, and that reused tokens fail cleanly.