INNER CODE UNIT · JavaScript

isApiLogin2faPendingValid

ClickDevTech/CELERITY-panel · index.js:196

function isApiLogin2faPendingValid(req) {
    const pending = req.session?.apiLogin2faPending;
    if (!pending) return false;
    if (!pending.createdAt) return false;
    return (Date.now() - pending.createdAt) < API_LOGIN_2FA_PENDING_TTL_MS;
}

const apiLoginLimiter = rateLimit({
    windowMs: 15 * 60 * 1000,
    max: 10,
    message: { error: 'Too many attempts. Try again in 15 minutes.' },
});

const apiTotpVerifyLimiter = rateLimit({
    windowMs: 10 * 60 * 1000,
    max: 8,
    message: { error: 'Too many verification attempts. Try again later.' },
});

View source record →