SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).

SuperTokens.com

Does the email verification recipe support changing a users email address? We would need to send emails to both the old email and new email.. and then only update the users email once the verificaton flow completed

you can always call the email verification functions directly in a custom API.

For examlpe, you can make an API which takes the "new" (unverfied) email and calls the emailverification.createEmailVerificationToken function and then send the link to that user

So im just using super tokens in this case to generate and track the links..

i would need to mark the user in some way so I know this is an email update flow not an email verify flow.. but that should be ok