lets-mfa/src/default-auth-policy.js

Free, secure, and quick way to add MFA to your existing app. No user migrations or re-architecture needed!

"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.DEFAULT_AUTH_POLICY = void 0;
exports.DEFAULT_AUTH_POLICY = {
    methods: {
        otp: {
            max_attempts: 3,
            enrollRequired: false,
        },
        sms: {
            max_attempts: 3,
            enrollRequired: false,
            provider: {
            // client must specify an sms provider
            },
        },
        webauthn: {
            attestation_type: "none",
            max_attempts: 3,
            enrollRequired: false,
            user_verification: "required",
        },
    },
};