Module: RailsAuthentication::Generators::Features::Ott

Included in:

AuthenticationGenerator

Defined in:

lib/generators/authentication/features/ott.rb

Overview

Opt-in (--ott): one-time token sign-in. The sign-in page becomes an email-only form; a 6-digit code is emailed and entered on a second screen. Codes are DB-backed, single-use, expire after 10 minutes, and are voided after 5 wrong attempts. Password machinery (Recoverable, Registerable, SessionsController#create) is left intact.