A magic link to authenticate (instead of manually entering a code).

This is the result of getting a passcode link and is usually the result of clicking the link from an email. This ALWAYS results in a 302 redirect. N.B. Magic link with 2FA enabled does not work and the SPA will get a redirect to the login error page with tf_required. Must use code option instead.