Aegis
Aegis copied to clipboard
beemdevelopment
Delay in OTP code change after expiration
Sometimes the OTP code does not change right away after expiration to a new OTP code. Instead of getting a new OTP code as soon as the current OTP code expires, it keeps the old OTP code for about halfway through the expiration time of when the new OTP code should have been populated. With no delays, it would give people more time to enter the OTP code.
The only thing I was doing was continuously logging into the same account form that uses OTP stored on Aegis many times. It may have been caused by turning on/off the mobile device that has the Aegis app on it and then turning the mobile device that has the Aegis app back on again multiple times to see the OTP code again for that account. Basically, it just happened after excessive use. Otherwise, I don't really have a reproducible case.
In your testing, how are you determining that a code has expired? Is it by looking at the progress bar and it being fully depleted, but Aegis is not generating the next code yet? Or is a service rejecting a code you got from Aegis?
Yes the progress bar is being fully depleted and Aegis is not generating the next code yet. About 50-75% through the next available progress bar would it generate the new code. It happens randomly.
It may have been from when I was testing it in my own app's form also. I was having problems with the entered OTP code and it was not being accepted. As soon as I re-did the OTP setup again on the mobile device and received a brand new OTP account for the website, everything went smooth and the OTP code was accepted.
But it was really strange because sometimes the original code would be accepted but then sometimes it wouldn't. I was trying to use hcaptcha in the form but now it works after setting up a new account for Aegis. I transferred my app from 1 PC to another and used the original code which may have had something to do with causing it.
I'm going to close this for now, since we're not able to reproduce this, and we have not received any other reports of this happening.