SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

How to Build a Resilient OTP State Machine for SMS 2FA in Node/Express

0
·1 views

A software engineer has outlined an architecture for handling SMS two-factor authentication (2FA) delivery failures in Node/Express applications using a state machine approach. The design separates delivery status from identity verification, ensuring that a failed or unconfirmed SMS delivery cannot grant a user login approval. A managed verification service owns the OTP secret and code-checking logic, while the application controls session management, abuse limits, attempt lifecycle, and audit trails. Delivery callbacks update the attempt record asynchronously but cannot change a terminal state or approve a login. Client-side polling reads a local attempt projection rather than querying the external verification service directly, improving both security and user experience.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

How to Customize Hugo PaperMod Theme Without Forking It

A developer has documented a method for deeply customizing the Hugo PaperMod theme without forking it, keeping the theme as an updatable submodule. The approach relies on Hugo's file resolution order, which prioritizes site-level files over theme files, enabling full overrides through a small set of custom layouts, data, and CSS files. A custom homepage is created via a single layouts/index.html file, with all copy stored in language-specific YAML data files to support multilingual sites cleanly. Visual changes such as color palette and typography are applied through CSS variables in the assets/css/extended/ directory, requiring no edits to theme files. The guide also flags common pitfalls, including broken dark mode caused by outdated body.dark selectors that no longer work with PaperMod's current data-theme attribute approach.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Karpathy's LotR Demo Shows AI Agents Can Handle Hours-Long Tasks Autonomously

AI researcher Andrej Karpathy recently demonstrated Claude Opus's capabilities by feeding it a million-token context, the opening paragraph of The Lord of the Rings, and a prompt to generate a procedural 3D scene in Three.js. The model worked autonomously for roughly two hours, producing 5,500 lines of code covering polygon placement, camera paths, and animation — at a total cost of about $10. The demo signals a shift in how work can be delegated to AI: rather than breaking tasks into small, supervised chunks, developers can now hand over full material and intent and await a complete result. The key human skills in this new paradigm become crafting the input brief — deciding what context goes in — and defining clear acceptance criteria before the run begins. Experts caution, however, that autonomous long-session output remains unsuitable for production software where errors affect real users and require ongoing maintenance.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

10 CLI Tools Developers Should Add to Their Workflow in 2026

A developer writing for DEV Community has highlighted 10 command-line interface tools that improve productivity and streamline daily development tasks. The list includes widely used tools such as Git, Docker CLI, GitHub CLI, kubectl, and HTTPie, alongside utilities like jq, ripgrep, fd, and just. Apidog CLI, used for running API test scenarios and managing environments within CI/CD pipelines, was singled out as the most impactful addition to the author's workflow. The author argues that moving repetitive tasks — including API testing, deployments, and version control — into the terminal makes them easier to script and automate. The common thread across all recommended tools is their ability to integrate with automation pipelines and maintain consistency between local development and CI/CD environments.

0 comments Read more at DEV Community
How to Build a Resilient OTP State Machine for SMS 2FA in Node/Express · ShortSingh