none
One-Time-Password Email Gate Question? RRS feed

  • Question

  • Hi,

    Quick question, the OTP email gate...once a user has received a code to their personal email, does the code expire? If so is this configurable and where is it done?

    Cheers,

    warks

    Thursday, January 8, 2015 6:36 AM

Answers

  • I don't think there is expiration date of this code. But it is related to session during password reset and such session by default has <add key="SessionTimeoutInMinutes" value="20" /> - 20 minutes timeout.

    So... One key is valid only during specified session.

    I haven't seen any configuration of that one time code expiration date - so I think it is "always valid", but only to use with specified session.


    If you found my post helpful, please give it a Helpful vote. If it answered your question, remember to mark it as an Answer.

    • Marked as answer by warkem Tuesday, January 13, 2015 11:44 PM
    Thursday, January 8, 2015 8:31 AM

All replies

  • I don't think there is expiration date of this code. But it is related to session during password reset and such session by default has <add key="SessionTimeoutInMinutes" value="20" /> - 20 minutes timeout.

    So... One key is valid only during specified session.

    I haven't seen any configuration of that one time code expiration date - so I think it is "always valid", but only to use with specified session.


    If you found my post helpful, please give it a Helpful vote. If it answered your question, remember to mark it as an Answer.

    • Marked as answer by warkem Tuesday, January 13, 2015 11:44 PM
    Thursday, January 8, 2015 8:31 AM
  • Yep that makes sense, thanks!
    Tuesday, January 13, 2015 11:44 PM