Skip to content

fix(auth): invalidate email OTP on a failed guess, not just a match - #2224

Merged
richiemcilroy merged 7 commits into
CapSoftware:mainfrom
addyCooks:fix/otp-verification-token-brute-force
Oct 22, 2026
Merged

richiemcilroy merged 7 commits into
CapSoftware:mainfrom
addyCooks:fix/otp-verification-token-brute-force