Yep, following the instructions for both the auth endpoints and the authorizer for my api did the trick. Just wanted to follow up here in case anyone else had the same misunderstanding I did.
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).