authgear / authgear/authgear-server

[OTP] Resend cooldown should not be shared across interactions

Open
#2,868 0 comments 0 reactions 1 assignee Claimed by @Rubikium View on GitHub
Dominant language
Go
Stars
2k
Forks
125
Avg merge
2d 17h
Merged PRs (30d)
32

Description

Steps to reproduce

1. Sign in with a phone number
2. See the enter OTP page.
3. Click back
4. Sign in with the same phone number
5. See rate limit error

Expected

1. Sign in with a phone number
2. See the enter OTP page and receive a OTP
3. Click back
4. Sign in with the same phone number
5. See the enter OTP page and do not receive a new OTP code. The cooldown is resumed from Step 2.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.