New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Invalidate codes after failed attempts #41

Open

slifty opened this issue Oct 13, 2022 · 0 comments

Contributor

slifty commented Oct 13, 2022

In the main permanent repository we have a practice of invalidating 2FA code after a certain number of failed attempts.

We should follow the same practice (we believe FusionAuth unfortunately doesn't handle this for us, so we have to implemented.)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment