fix: add OTP expiration check in ResetPassword by lakhansamani · Pull Request #494 · authorizerdev/authorizer
Navigation Menu
{{ message }}
authorizerdev / authorizer Public
- Notifications You must be signed in to change notification settings
- Fork 204
Merged
fix: add OTP expiration check in ResetPassword#494
lakhansamani merged 3 commits intomainfrom
fix: add OTP expiration check in ResetPassword#494
lakhansamani merged 3 commits intomainfrom
Conversation
Copy link Copy Markdown
Contributor
lakhansamani
commented
Mar 1, 2026
lakhansamani
commented
Summary
- Added OTP expiration check in ResetPassword OTP flow
- Consistent with VerifyOTP which already checks
otp.ExpiresAt
Test plan
- Verify expired OTPs are rejected in reset password flow
- Verify valid OTPs still work
Fixes #483
lakhansamani added 3 commits
March 1, 2026 11:51The reset password OTP path only checked if the OTP value matched but not if it was expired. Added expiry check consistent with VerifyOTP. Fixes #483
lakhansamani
merged commit
af17285
into
main
lakhansamani
deleted the
fix/reset-password-otp-expiry
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
1 participant