We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9d02e65 commit 396b823Copy full SHA for 396b823
app/utils/totp.server.ts
@@ -18,7 +18,7 @@
18
* Here's the typical process:
19
* 1. Generate a secret (crypto.randomBytes(32).toString('hex'))
20
* 2. Generate the TOTP with that secret (generateTOTP(secret))
21
- * 3. Store the secret and the TOTP in the database along with the thing you're verifying (e.g. user email)
+ * 3. Store the secret, digits, and period in the database along with the thing you're verifying (e.g. user email)
22
* 4. Send the TOTP to the user (e.g. email it to them)
23
* 5. When the user enters the TOTP, verify it (verifyTOTP(token, secret))
24
* 6. If the TOTP is valid, delete it from the database and allow the user to proceed
0 commit comments