Hopefully the HTTP header is more reliable than the meta tag. The meta tag was previously placed in the body and not the header, which isn't standard, so it's possible that's why some browsers didn't respect it. Additionally, show the remaining time to complete authentication in seconds instead of a timestamp that may not match the user's timezone. Also show the number of seconds until the refresh. This requires a new feature in Rodauth, so update to the latest Rodauth commit.
10 lines
647 B
Plaintext
10 lines
647 B
Plaintext
<% @page_message = "Your one-time password authentication has been locked out, and you must wait to unlock it." %>
|
|
|
|
<div class="space-y-6">
|
|
<p><%= rodauth.otp_unlock_consecutive_successes_label %>: <%= rodauth.otp_unlock_num_successes %></p>
|
|
<p><%= rodauth.otp_unlock_required_consecutive_successes_label %>: <%= rodauth.otp_unlock_auths_required %></p>
|
|
<p><%= rodauth.otp_unlock_next_auth_deadline_label %>: <%= (rodauth.otp_unlock_deadline - Time.now).to_i %> seconds</p>
|
|
|
|
<p>Page will automatically refresh when authentication is possible (in <%= (rodauth.otp_unlock_next_auth_attempt_after - Time.now).to_i + 1 %> seconds).</p>
|
|
</div>
|