heapsource / active_model_otp

Adds methods to set and authenticate against one time passwords (Two-Factor Authentication). Inspired in AM::SecurePassword
MIT License
774 stars 81 forks source link

Preventing reuse of Time based OTP's README clarification? #124

Open mquadri23 opened 8 months ago

mquadri23 commented 8 months ago

This section describes how we can limit multiple use of the same OTP code, but does not clarify whether a new OTP code will be regenerated if a user decides to log in again within the interval set. Saw this comment and assuming it does not regenerate the code during the interval.

Can you confirm my understanding? If so, could you update the README to reflect this? Or we can try to create a Pull Request to better document this scenario as soon as you can confirm the gem works this way.