From 3dc00ed7fcd1804868a843b83c182ae1812a5fa1 Mon Sep 17 00:00:00 2001
From: Pete Matsyburka <pete@docuseal.com>
Date: Sat, 26 Sep 2026 17:09:36 +0300
Subject: [PATCH] adjust 2fa rate limit

---
 lib/submitters.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/submitters.rb b/lib/submitters.rb
index 996efaa52..99b0884db 100644
--- a/lib/submitters.rb
+++ b/lib/submitters.rb
@@ -275,7 +275,7 @@ module Submitters
   def verify_link_otp!(otp, submitter)
     return false if otp.blank?
 
-    RateLimit.call("verify-2fa-code-#{Digest::MD5.base64digest(submitter.email)}",
+    RateLimit.call("verify-2fa-code-#{Digest::MD5.base64digest(submitter.email.downcase.squish)}",
                    limit: 2, ttl: 45.seconds, enabled: true)
 
     link_2fa_key = [submitter.email.downcase.squish, submitter.submission.template.slug].join(':')