ISVA(Internal) -019 OTP valid for more than the specified expiration period(> 2 minutes)

[niharaabeywardhana]

Description

#

OTP valid for more than the specified expiration period(> 2 minutes)

Environment : UAT

Step to Reproduce

#

1.Trigger OTP generation for user authentication. 2.Record the time when the OTP is generated. 3.Wait for additional minutes greater than 2 minutes (OTP expiration period).

4. Attempt to use the OTP after 3 minutes. 5.Record the result.

Expected Result

#

The OTP should expire after 2 minutes and should not be accepted for authentication after the expiration period.

Actual Result (07/10/2024)

#

The OTP remains valid and can still be used after 3 minutes.User is navigated to the intranet.

https://github.com/user-attachments/assets/03861e6d-d859-483c-87ef-a53e6ec0d0e9

[supunncinga]

Fixed directly on the UAT environment. (this was a configuration and does not require a release)