Files
ubicloud/views/auth/otp_unlock_not_available.erb
Jeremy Evans a4e5c94a0a Use HTTP header instead of meta tag for OTP lockout refresh
Hopefully the HTTP header is more reliable than the meta tag. The
meta tag was previously placed in the body and not the header,
which isn't standard, so it's possible that's why some browsers
didn't respect it.

Additionally, show the remaining time to complete authentication
in seconds instead of a timestamp that may not match the user's
timezone. Also show the number of seconds until the refresh.

This requires a new feature in Rodauth, so update to the latest
Rodauth commit.
2025-08-01 05:23:15 +09:00

10 lines
647 B
Plaintext

<% @page_message = "Your one-time password authentication has been locked out, and you must wait to unlock it." %>
<div class="space-y-6">
<p><%= rodauth.otp_unlock_consecutive_successes_label %>: <%= rodauth.otp_unlock_num_successes %></p>
<p><%= rodauth.otp_unlock_required_consecutive_successes_label %>: <%= rodauth.otp_unlock_auths_required %></p>
<p><%= rodauth.otp_unlock_next_auth_deadline_label %>: <%= (rodauth.otp_unlock_deadline - Time.now).to_i %> seconds</p>
<p>Page will automatically refresh when authentication is possible (in <%= (rodauth.otp_unlock_next_auth_attempt_after - Time.now).to_i + 1 %> seconds).</p>
</div>