[GH-ISSUE #393] Feature: OneTime Confirm #8250

Closed
opened 2026-04-13 03:20:25 -05:00 by GiteaMirror · 2 comments
Owner

Originally created by @nathanielrich on GitHub (Nov 2, 2024).
Original GitHub issue: https://github.com/better-auth/better-auth/issues/393

A feature that allows you to secure critical areas (e.g., deleting a user or similar actions - freely selectable). The user must, for instance, enter their password, or they receive an email with a one-time password (OTP) that they need to confirm. Once confirmed, the function is then triggered in the callback.

Originally created by @nathanielrich on GitHub (Nov 2, 2024). Original GitHub issue: https://github.com/better-auth/better-auth/issues/393 A feature that allows you to secure critical areas (e.g., deleting a user or similar actions - freely selectable). The user must, for instance, enter their password, or they receive an email with a one-time password (OTP) that they need to confirm. Once confirmed, the function is then triggered in the callback.
GiteaMirror added the lockedenhancement labels 2026-04-13 03:20:25 -05:00
Author
Owner

@AmineYagoub commented on GitHub (Nov 2, 2024):

Yes actually this is what I'm looking for, @Bekacru any suggestion on how we can achieve this with passkey plugin?

<!-- gh-comment-id:2453042455 --> @AmineYagoub commented on GitHub (Nov 2, 2024): Yes actually this is what I'm looking for, @Bekacru any suggestion on how we can achieve this with passkey plugin?
Author
Owner

@Bekacru commented on GitHub (Nov 2, 2024):

I think this could be a plugin (or an internal plugin). Basically, the implementation should check if an endpoint requires a password or some kind of verification. It should hold the action state somewhere (maybe in a cookie) and, once verified, retrieve the action from the cookie and complete it.

<!-- gh-comment-id:2453065768 --> @Bekacru commented on GitHub (Nov 2, 2024): I think this could be a plugin (or an internal plugin). Basically, the implementation should check if an endpoint requires a password or some kind of verification. It should hold the action state somewhere (maybe in a cookie) and, once verified, retrieve the action from the cookie and complete it.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/better-auth#8250