Yeah it doesn't seem like Next.js has figured out how they want their API routes to work with the new
app
directory yet, so I think it'll be hard for a lot of tools based on API routing to make definitive design decisions or implementations until Next figures out what they want to do with that.
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).