Has anyone implimented a way to set a maximum amou...
# general
k
Has anyone implimented a way to set a maximum amount of resend attempts for Passwordless? I have configured max attempts, but dont see anything about resending attempts.
r
hey @kaltemrix the resend attempts gets counted towards the max attempts.
afrer reaching the max attempts, the user has to restart the flow by entering their email again.
k
Maybe I have something misconfigured. I seem to be able to resend an unlimited amount of time. The max attempts works however
r
oh i mean the max attempts counts towards how many incorrect otps the user can use.
there is no limit that we have added to actually sending the otp
you can override our apis to add a limit that you like
k
Understood. Do you recommend a way of handling this? My initial thoughts were to use the UserMetadata to store a counter of some kind
r
That would work. Or you could use a cache that has an auto expiry even (would be easier to cleanup)
k
Great i'll do some investigation. Thanks for your help
Sorry one more question, how long does the
login attempt info
last?
r
It lasts forever. Until the user logs in, or clicks change email / phone
k
Ok thanks