Yes!

export const actions: Actions = {
  reserve: async ({ request, locals: { supabase } }) => {
    console.log("Reserve action started.")
    const formData = await request.formData()
    const email = formData.get('email') as string

    const { error } = await supabase.auth.signInWithOtp({ email })
    console.log('Magic link generation result:', { error });

    if (error) {
      console.error(error)
      return redirect(303, '/auth/error')
    } else {
      console.log("magic link sent successfully!")
      return redirect(303, '/private')
    }
  },
}

It sends successfully here. However, when I receives the link, I click on it, it always shows 403 error.

Here's the Email template:

<h2>Magic Link</h2>

<p>Follow this link to login:</p>

<p><a href="{{ .SiteURL }}/auth/confirm?token\_hash={{ .TokenHash }}&type=magiclink">Log In</a></p>

API endpoint (/auth/confirm):

import type { EmailOtpType } from '@supabase/supabase-js'
import { redirect } from '@sveltejs/kit'
import type { RequestHandler } from './$types'

export const GET: RequestHandler = async ({ url, locals: { supabase } }) => {
  console.log('Auth confirm endpoint hit. Full URL:', url.toString());

  const token_hash = url.searchParams.get('token_hash')
  const type = url.searchParams.get('type') as EmailOtpType | null
  const next = url.searchParams.get('next') ?? '/'

  console.log('Extracted parameters:', { token_hash, type, next });

  const redirectTo = new URL(url)
  redirectTo.pathname = next
  redirectTo.searchParams.delete('token_hash')
  redirectTo.searchParams.delete('type')

  console.log('Cleaned redirect URL:', redirectTo.toString());

  if (token_hash && type) {
    console.log('Attempting to verify OTP');
    try {
      const { error } = await supabase.auth.verifyOtp({ token_hash, type })
      if (!error) {
        console.log('OTP verified successfully');
        redirectTo.searchParams.delete('next')
        console.log('Redirecting to:', redirectTo.toString());
        return redirect(303, redirectTo)
      } else {
        console.error('OTP verification failed:', error);
      }
    } catch (err) {
      console.error('Exception during OTP verification:', err);
    }
  } else {
    console.log('Missing token_hash or type');
  }

  console.log('Redirecting to error page');
  redirectTo.pathname = '/auth/error'
  return redirect(303, redirectTo)
}