Actions
Bug #44
closedForgot Password Page Allows Unlimited OTP Verification Attempts
Status:
Closed
Priority:
Urgent
Assignee:
-
Description
On the Forgot Password page, users can enter OTP multiple times without any restriction. The UI does not enforce any attempt limit, cooldown, or lockout, allowing unlimited OTP verification attempts
Environment
URL: https://dev.akinderwellness.com/pages/forgotPassword
Environment: Development
Browser: Chrome (Windows)
Steps to Reproduce
- Navigate to: https://dev.akinderwellness.com/pages/forgotPassword
- Enter a valid email and request OTP
- Enter incorrect OTP
- Repeat step 3 multiple times
Expected Result
After a limited number of attempts (e.g., 3–5):
- User should be blocked temporarily OR OTP should expire
- UI should show message like: “Too many attempts. Please try again later.”
Actual Result
Unlimited OTP attempts allowed
No error for excessive attempts
No cooldown or lockout
UI continues accepting OTP indefinitely
Files
Updated by Adhi Narayanan 28 days ago
- File localhost-3000-pages-forgotPassword (2).png localhost-3000-pages-forgotPassword (2).png added
- Status changed from New to Resolved
- % Done changed from 0 to 100
Actions