shishantbiswas/bknd
1
0
Fork 0
mirror of https://github.com/shishantbiswas/bknd.git synced 2026-03-15 20:17:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

add validation for used OTP codes

Browse Source
This commit is contained in:
dswbx
2025-11-07 09:12:58 +01:00
parent ee2ab982df
commit 7e399830e5
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
app/src/plugins/auth/email-otp.plugin.ts
View File

@@ -293,6 +293,10 @@ async function getValidatedCode(
if (otpData.expires_at < new Date()) { if (otpData.expires_at < new Date()) {
throw new OTPError("Code expired"); throw new OTPError("Code expired");
} }
if (otpData.used_at) {
throw new OTPError("Code already used");
}
return otpData; return otpData;
} }