Use Time as defence against brute force OTP rather the hCaptcha

purton-tech / barricade

Quickly add user registration and logon to any application

https://hub.docker.com/r/purtontech/barricade

MIT License

180 stars 7 forks source link

Closed 9876691 closed 2 years ago

9876691 commented 2 years ago

If the user tries the OTP code more than 3 times, then start to exponentially time out the attemps. i.e.

4 seconds, 8 seconds etc etc.