mozilla-lockwise / lockwise-android

Firefox's Lockwise app for Android
https://mozilla-lockwise.github.io/lockwise-android/
Mozilla Public License 2.0
623 stars 104 forks source link

Verification email sent after 40-50 minutes, and code already expired #1188

Open bogdane opened 4 years ago

bogdane commented 4 years ago

Steps to reproduce

Try to login the first time.

Expected behavior

Verification email should be sent immediately, with a code that doesn't expire in less than one hour.

Actual behavior

Verification email is sent after 40-50 minutes, with a verification code that already expired before the email was even sent, because it expires in 5 minutes.

Device & build information

Received: from a59-51.smtp-out.us-west-2.amazonses.com ([54.240.59.51]) by mx-ha.gmx.net (mxgmx017 [212.227.15.10]) with ESMTPS (Nemesis) id 1M3Br5-1jAFsa1ZhV-003kG0 for DELETED@gmx.com; Mon, 16 Mar 2020 13:58:01 +0100 [....] Date: Mon, 16 Mar 2020 12:08:32 +0000

As you can see, the verification email was generated at 12:08+00, and sent to me at 12:58+00 (TZ adapted), 45 minutes too late.

Already happened 6 times, and I'm unable to login.

Please note that this is not a problem on my email-provider side, as all other emails are received in less than a maximum of 2 minutes by my tests.

Verification code should expire in one hour, not 5 minutes. Even GitHub verification code has a expiration time of 1 hour.