Links opened from email directing a user to verify an auth token will 404 as the frontend's server does not recognize the /verify-token endpoint. Two options:
-
Configure the frontend's server to redirect this request to the react app e.g. to the build index.html
-
Put both apps under one domain with separate subdomains and handle this verification link from the server, setting a http-only cookie from the server and redirecting to the frontend. This has the advantage of using the more secure http-only cookie but requires some setup.