Merge branch 'main' into expiry-links

2025-11-20 11:41:44 +10:00 · 2024-11-19 11:09:46 +00:00
parent 2d7988f484 0eff336175
commit cfb57c8c27
23 changed files with 445 additions and 224 deletions
--- a/packages/lib/server-only/document/is-recipient-authorized.ts
+++ b/packages/lib/server-only/document/is-recipient-authorized.ts
@ -112,6 +112,7 @@ export const isRecipientAuthorized = async ({
      return await verifyTwoFactorAuthenticationToken({
        user,
        totpCode: token,
+        window: 10, // 5 minutes worth of tokens
      });
    })
    .exhaustive();