What changed
No action needed unless it is required.
Affects POST /phone_numbers/{phone_number_id}/attempt_verification.
Who is affected
Code that sends POST /phone_numbers/{phone_number_id}/attempt_verification (honor_lockout).
Before and after
| Where | Before | After |
|---|---|---|
| POST /phone_numbers/{phone_number_id}/attempt_verification · honor_lockout | absent | present |
| POST /sign_in_tokens · honor_lockout | absent | present |
| POST /users/{user_id}/verify_totp · honor_lockout | absent | present |
| POST /email_addresses/{email_address_id}/attempt_verification · honor_lockout | absent | present |
| POST /users/{user_id}/verify_password · honor_lockout | absent | present |
Based on Clerk’s published API specification. How severity is decided.