github-starred/better-auth
2
0
Fork 0
mirror of https://github.com/better-auth/better-auth.git synced 2026-10-19 23:53:17 -05:00
Code Issues 2.5k Packages Projects Releases 112 Wiki Activity

fix(email-otp): add stricter default rate limits for password reset endpoints (#7658)

Browse Source
This commit is contained in:
Taesu
2026-01-28 17:06:03 -08:00
committed by Alex Yang
parent 12631bbcb7
commit dcc289e49d
1 changed files with 21 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/better-auth/src/plugins/email-otp/index.ts
+21
View File
@@ -141,6 +141,27 @@ export const emailOTP = (options: EmailOTPOptions) => {
window: 60,
max: 3,
},
{
pathMatcher(path) {
return path === "/email-otp/request-password-reset";
},
window: 60,
max: 3,
},
{
pathMatcher(path) {
return path === "/email-otp/reset-password";
},
window: 60,
max: 3,
},
{
pathMatcher(path) {
return path === "/forget-password/email-otp";
},
window: 60,
max: 3,
},
],
options,
} satisfies BetterAuthPlugin;