rpc: return an error if auth attempted more than 3 times

0xsequence · Jul 31, 2024 · e36c783 · e36c783
1 parent a51a5da
commit e36c783
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/rpc/sessions.go b/rpc/sessions.go
@@ -74,6 +74,10 @@ func (s *RPC) RegisterSession(
 			return nil, nil, proto.ErrWebrpcInternalError.WithCausef("decrypting verification context data: %w", err)
 		}
 
+		if verifCtx.Attempts >= 3 {
+			return nil, nil, proto.ErrTooManyAttempts
+		}
+
 		if time.Now().After(verifCtx.ExpiresAt) {
 			return nil, nil, proto.ErrChallengeExpired
 		}