Microsoft's link checker using user's recovery token by browsing to url

[samip5]

Describe the bug
I think this shouldn't happen that when user gets their recovery url, and Microsoft verifies the link, it shouldn't use the token.

To Reproduce
Steps to reproduce the behavior:

1. Try to reset password with an email address on O365
2. See that the Microsoft link checker thing checks it
3. Try to use it after it was checked
4. See that you're unable to use the token as Microsoft's automation used it already

Expected behavior
I would have expected Microsoft's link checker to not count as using the link.

Screenshots

Version and Deployment:

• authentik version: 2025.2.3
• Deployment: docker-compose

[dominic-r]

Duplicate of #13805

[dominic-r]

Closed by #14325