indice-co / Indice.Platform

Indice Platform addons and featues
MIT License
46 stars 7 forks source link

Add InteractionMode property to otp purpose during device authentication #434

Closed dkarkanas closed 3 weeks ago

dkarkanas commented 1 month ago

We need to differentiate between the 4-pin and biometric purposes during device registration.

Users completing the process in less than 30 seconds are encountering the error: Last token has not expired yet. Please wait a few seconds and try again.

dkarkanas commented 3 weeks ago

This fixes the brute force control for otp in device authentcation. The proper solution requires a SecurityStamp to UserDevice table, and use this stamp to the otp purpose