Has anyone implimented a way to set a maximum amount of resend attempts for Passwordless? I have con...

kaltemrix

11/27/2023, 11:06 AM

Has anyone implimented a way to set a maximum amount of resend attempts for Passwordless? I have configured max attempts, but dont see anything about resending attempts.

rp_st

11/27/2023, 11:06 AM

hey @kaltemrix the resend attempts gets counted towards the max attempts.

rp_st

11/27/2023, 11:06 AM

afrer reaching the max attempts, the user has to restart the flow by entering their email again.

kaltemrix

11/27/2023, 11:08 AM

Maybe I have something misconfigured. I seem to be able to resend an unlimited amount of time. The max attempts works however

rp_st

11/27/2023, 11:11 AM

oh i mean the max attempts counts towards how many incorrect otps the user can use.

rp_st

11/27/2023, 11:11 AM

there is no limit that we have added to actually sending the otp

rp_st

11/27/2023, 11:11 AM

you can override our apis to add a limit that you like

kaltemrix

11/27/2023, 11:12 AM

Understood. Do you recommend a way of handling this? My initial thoughts were to use the UserMetadata to store a counter of some kind

rp_st

11/27/2023, 11:13 AM

That would work. Or you could use a cache that has an auto expiry even (would be easier to cleanup)

kaltemrix

11/27/2023, 11:14 AM

Great i'll do some investigation. Thanks for your help

kaltemrix

11/27/2023, 12:01 PM

Sorry one more question, how long does the

login attempt info

last?

rp_st

11/27/2023, 12:04 PM

It lasts forever. Until the user logs in, or clicks change email / phone

kaltemrix

11/27/2023, 12:05 PM

Ok thanks

Previous Next

SuperTokens.com

SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).