Improve error message when TOPT is not valid

bcg62 · Dec 10, 2021 · e8f3b54 · e8f3b54
1 parent d2a55b6
commit e8f3b54
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/auth/password.go b/lib/auth/password.go
@@ -298,7 +298,7 @@ func (s *Server) checkTOTP(ctx context.Context, user, otpToken string, dev *type
 		return trace.AccessDenied("failed to validate TOTP code: %v", err)
 	}
 	if !valid {
-		return trace.AccessDenied("TOTP code not valid")
+		return trace.AccessDenied("invalid one time token, please check if the token has expired and try again")
 	}
 	// if we have a valid token, update the previously used token
 	if err := s.UpsertUsedTOTPToken(user, otpToken); err != nil {