passwordless
passwordless copied to clipboard
Behaviour of acceptToken
acceptToken does not throw any error if the token is invalid, so how do you validate a token that is received via a delivery method (ex: SMS)?
true, have the same issue. What I am doing is I am checking if req.user is set, which is done on success. But it shouldn't be handled that way, Error should be thrown.