Require a recovery code when max failure attempts is exceeded #1

makouchyk · 2025-03-11T12:35:26Z

hassaneslami2765 · 2025-03-12T13:23:27Z

app/controllers/devise_otp/devise/otp_credentials_controller.rb

          sign_in(resource_name, resource)

          otp_set_trusted_device_for(resource) if params[:enable_persistence] == "true"
          otp_refresh_credentials_for(resource)
          respond_with resource, location: after_sign_in_path_for(resource)
        else
+          bump_failed_attempts(resource)


maybe bump only on non-empty otp

Require a recovery code when max failure attempts is exceeded

ddf7cbb

hassaneslami2765 reviewed Mar 12, 2025

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Require a recovery code when max failure attempts is exceeded #1

Require a recovery code when max failure attempts is exceeded #1

makouchyk commented Mar 11, 2025 •

edited

Loading

hassaneslami2765 Mar 12, 2025

Require a recovery code when max failure attempts is exceeded #1

Are you sure you want to change the base?

Require a recovery code when max failure attempts is exceeded #1

Conversation

makouchyk commented Mar 11, 2025 • edited Loading

hassaneslami2765 Mar 12, 2025

Choose a reason for hiding this comment

makouchyk commented Mar 11, 2025 •

edited

Loading