Matt Molyneaux

Are the clocks on your device and your server correct? TOTP is very sensitive to clock drift and it's been my personal experience that this sort of issue is usually...

> the API responds with 200 On success, you should get a 302. Are you using your own templates? It's possible there's an error but your template isn't displaying it.

@yoandyshyno I did say that these changes are Twilio specific and I don't think the bug you found only affects Twilio. Have you looked into that?

Your issue was with an uncaught exception causing an internal error response. Our view code should be catching errors from whatever backend you're using and as it's not I would...

@schinckel that's covered in #388 (thanks to your earlier comment that prompted me to go look at `DisableView`)

Wouldn't it be easier to just pass in your own `form_list` to `SetupView.as_view` or just subclass the view?

I'd be up for having a 2fa-enabled password reset view.

I think you're going to make things too complicated for yourself. We already have a separate view for setting up backup phones, so why not a separate view for changing...

@judy2k I'd read @Bouke 's comments on https://github.com/Bouke/django-two-factor-auth/pull/215 There's also the option to make the Nexmo gateway a separate package, so I'd keep that mind if you do go ahead...

Where did you put this code? I see no reason why it shouldn't work. Also, you might want to look into your servers clocks, OTP shouldn't care about being on...