otp-without-db

otp-without-db copied to clipboard

Add a salt when hashing

1

A user can ask for otp multiple times, and reverse engineer your secret key, because he has all the elements of the hash, the phone number, the otp, and the...

Turkish

for same phone number, avoid repeated create otp in a short time

3

Hi, thanks for the package, i want to avoid user generate otp repeated in short time. Let say same phone number, can only generate new otp after x minutes/seconds from...

harrykc

At first I really liked the idea of using cryptography instead of storing OTP attemps in DB, but how to protect from buteforce attacks? Usually I'd expect any OTP attempt...

Akronae