UserMfaRememberedDevice
UserMfaRememberedDevice Schema¶
Description: A browser/device excused from the TOTP challenge for a fixed window.
Minted when the user ticks "don't ask again on this device" on a
successful challenge: the browser holds a high-entropy random token in
a long-lived cookie; only its SHA-256 hex lands here, so rows are
revocable server-side and a DB leak exposes nothing replayable.
Deliberately a FIXED expiry (not rolling) — a stolen cookie has a
bounded life. Disabling 2FA (or "forget all devices") deletes every
row for the user.
Properties¶
| Name | Type | Description |
|---|---|---|
| id | Integer |
No description |
| user_id | Integer |
No description |
| token_hash | String(64) |
No description |
| label | String(255) (Optional) |
No description |
| created_on | DateTime |
No description |
| expires_on | DateTime |
No description |
| last_used_on | DateTime (Optional) |
No description |
Relationships¶
| Relationship Name | Type |
|---|---|
| user | User |