dev-xo / remix-auth-totp

A Time-Based One-Time Password (TOTP) Authentication Strategy for Remix-Auth.
https://totp.fly.dev
MIT License
418 stars 28 forks source link

[ Feat ] Add `expiresAt` field to clean-up unused / expired OTPs from database. #23

Closed dev-xo closed 1 year ago

dev-xo commented 1 year ago

The expiersAt database field in Legacy Remix Auth OTP package helped remove old, unused codes from database.

To invalidate a code, users had to enter it, but if at some point they quits the authentication flow, the code might stay active. If they later enters it, the system would deactivate it, but this didn't often happen when our users quits the authentication flow.

This database field will be reintroduced along with usage instructions for invalidating and cleaning up expired and unused codes in our database.