adminbruno/docuseal
1
0 Fork 0
mirror of https://github.com/docusealco/docuseal synced 2026-11-04 06:42:32 -05:00
Code Issues Packages Projects Releases Wiki Activity

adjust devise lock

Browse Source
This commit is contained in:
Pete Matsyburka committed 2026-09-28 09:26:40 +03:00
1 parent 800101f747
commit a8433e9bd3
2 files changed
+3 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/controllers/mfa_setup_controller.rb
+1 -1
View File
@@ -33,7 +33,7 @@ class MfaSetupController < ApplicationController
def destroy def destroy
RateLimit.call("mfa-setup-otp-#{current_user.id}", limit: 5, ttl: 5.minutes, enabled: true) RateLimit.call("mfa-setup-otp-#{current_user.id}", limit: 5, ttl: 5.minutes, enabled: true)
if current_user.validate_and_consume_otp!(params[:otp_attempt]) if current_user.valid_for_authentication? { current_user.validate_and_consume_otp!(params[:otp_attempt]) }
current_user.update!(otp_required_for_login: false, otp_secret: nil) current_user.update!(otp_required_for_login: false, otp_secret: nil)
redirect_to settings_profile_index_path, notice: I18n.t('2fa_has_been_removed') redirect_to settings_profile_index_path, notice: I18n.t('2fa_has_been_removed')
config/initializers/devise.rb
+2 -2
View File
@@ -235,10 +235,10 @@ Devise.setup do |config|
# Number of authentication tries before locking an account if lock_strategy # Number of authentication tries before locking an account if lock_strategy
# is failed attempts. # is failed attempts.
# config.maximum_attempts = 20 config.maximum_attempts = 15
# Time interval to unlock the account if :time is enabled as unlock_strategy. # Time interval to unlock the account if :time is enabled as unlock_strategy.
# config.unlock_in = 1.hour config.unlock_in = 23.hours
# Warn on the last attempt before the account is locked. # Warn on the last attempt before the account is locked.
# config.last_attempt_warning = true # config.last_attempt_warning = true