fix: otp

bageldb · Nov 7, 2023 · f67d7da · f67d7da
1 parent f42949a
commit f67d7da
Show file tree

Hide file tree

Showing 5 changed files with 9 additions and 7 deletions.
diff --git a/bageldb-flutter/CHANGELOG.md b/bageldb-flutter/CHANGELOG.md
@@ -177,3 +177,7 @@
 # 0.2.24
 
 - Add: `updatePassword()` method
+
+# 0.2.24
+
+- Add: `validateOtp()` t query param to ensure the otp is valid
diff --git a/bageldb-flutter/lib/src/bagel_db_users.dart b/bageldb-flutter/lib/src/bagel_db_users.dart
@@ -152,7 +152,7 @@ class BagelUsersRequest {
     String? _nonce = _getOtpRequestNonce() ?? nonce;
     if (_nonce.isEmpty)
       throw ("Couldn't find OTP nonce, please run requestOTP first");
-    String url = '$authEndpoint/user/otp/verify/$_nonce';
+    String url = '$authEndpoint/user/otp/verify/$_nonce?t=${DateTime.now()}';
     Map body = {"otp": otp};
     try {
       Response res = await dio.post(url, data: body);

diff --git a/bageldb-flutter/pubspec.yaml b/bageldb-flutter/pubspec.yaml
@@ -1,6 +1,6 @@
 name: bagel_db
 description: Dart plugin to retrieve and update data on BagelDB. This library allows you to build a backend in a matter of minutes, make REST API requests and manage your content easily
-version: 0.2.24
+version: 0.2.25
 homepage: https://www.bageldb.com/
 
 environment:

diff --git a/bageldb-flutter/test/bagel_db_test.dart b/bageldb-flutter/test/bagel_db_test.dart
@@ -61,10 +61,8 @@ updateUserPasswordTest() {
   group('phone auth test', () {
     test('update user password test', () async {
       try {
-        final res = await db.bagelUsersRequest.updatePassword(
-          testPhone,
-          "123123",
-        );
+        final res =
+            await db.bagelUsersRequest.updatePassword(testPhone, testPassword);
         print({"res": res});
         expect(res, isNotNull);
       } catch (e) {

diff --git a/bageldb-js/src/users.ts b/bageldb-js/src/users.ts
@@ -102,7 +102,7 @@ export default class BagelUsersRequest {
    */
   async validateOtp(otp: string) {
     const nonce = await this._getOtpRequestNonce();
-    const url = `${AUTH_ENDPOINT}/user/otp/verify/${nonce}`;
+    const url = `${AUTH_ENDPOINT}/user/otp/verify/${nonce}?t=${Date.now()}`;
     const body = { otp };
     try {
       const res = await this.axios.post(url, body);