- Introduce /email code

- Add max tries for /email code - Introduce a PasswordRecoveryService
2017-03-06 13:54:46 -05:00
parent a64f758ee9
commit 7d4bfcd99d
40 changed files with 529 additions and 240 deletions
@@ -114,6 +114,10 @@ public class SecuritySettings implements SettingsHolder {
    public static final Property<Integer> RECOVERY_CODE_HOURS_VALID =
        newProperty("Security.recoveryCode.validForHours", 4);

+    @Comment("Max number of tries to enter recovery code")
+    public static final Property<Integer> RECOVERY_CODE_MAX_TRIES =
+        newProperty("Security.recoveryCode.maxTries", 3);
+
    @Comment({
        "Seconds a user has to wait for before a password recovery mail may be sent again",
        "This prevents an attacker from abusing AuthMe's email feature."