ACME HQDemo work items and pages, made up for Emargen's demo. Not a real company.

Engineering / ENG-1707

At most five phone codes an hour per number

Project: Engineering
Type: Story
Status: Done Done
Priority: Medium
Reporter: Mira Holm <mira.holm@acme-hq.example>
Assignee: Elif Yildiz <elif.yildiz@acme-hq.example>
Labels: securityphone-codes
Components: identity-servicenotifier
Fix versions: identity-service 2026.09.09notifier 2026.09.09
Sprint: Sprint 50
Story points: 2
Parent: ENG-1702 Sign-in lockout and rate limits
Created: 4 Sep 2026, 08:20 UTC
Updated: 9 Sep 2026, 12:00 UTC
Resolved: 9 Sep 2026, 12:00 UTC

Description

Each code costs an SMS and can be used to flood someone's phone.

Acceptance criteria

A sixth code within an hour for the same number is refused: "Too many codes asked for. Try again later."
The 60-second wait between codes stays.

Comments (0)

No comments.