Skip to content

New error code is necessary for users who entered incorrect MFA SMS code over 10 times. #90

Description

@yjkimis

Describe the problem you'd like to have solved

We use MFA SMS and Guardian-js-sdk.

I know user will be locked after 10 incorrect SMS code input and the user should wait for a while.
https://community.auth0.com/t/mfa-limits-for-otp-login-fails-with-error-too-many-failed-codes-wait-for-some-minutes-before-retrying/101582

But, Guardian-js-sdk return same error code "invalid_otp" when the user is locked and when the user enters an incorrect code.
Even if the user enters the correct code, when the user is locked, the same message "invalid_otp" is returned.

So, I can't distinguish these situation and show correct messages to user.

And, I found that there is no error code for user who enterd incorrect code over 10 times.
https://github.com/auth0/auth0-guardian.js?tab=readme-ov-file#error-codes

Describe the ideal solution

New error code, something like "too_many_incorrect_input" is necessary for users who entered incorrect code over 10 times.

Thanks.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions