fix: give 20 minutes for one time passcode

DanielleMaywood · DanielleMaywood · commit 32a8df4b9b09 · 2024-10-01T14:01:05.000Z
diff --git a/coderd/userauth.go b/coderd/userauth.go
@@ -253,10 +253,8 @@ func (api *API) postRequestOneTimePasscode(rw http.ResponseWriter, r *http.Reque
 	}
 	aReq.Old = user
 
-	// TODO: Should we use something different?
 	passcode := uuid.New()
-	// TODO: What should the token duration be?
-	passcodeExpiresAt := dbtime.Now().Add(5 * time.Minute)
+	passcodeExpiresAt := dbtime.Now().Add(20 * time.Minute)
 
 	hashedPasscode, err := userpassword.Hash(passcode.String())
 	if err != nil {
