MinorCustomer portal and access controlMay 20, 2026

Customer portal magic links now require a tenant customer match

Customer portal login requests now send magic-link emails only when the address belongs to that tenant through a customer record or booking.

All studios

What changed

Portal magic-link requests are now checked against the tenant customer and booking records before an email is sent.
Unknown addresses still receive the same public success response, but no email is delivered.
The guard applies to both platform tenant URLs and custom-domain portal URLs.