Function getOTP

apps/sim/lib/core/security/otp.ts:111–138

(
  kind: DeploymentKind,
  deploymentId: string,
  email: string
)

}

export async function getOTP(
  kind: DeploymentKind,
  deploymentId: string,
  email: string
): Promise<string | null> {
  const keys = OTP_KEYS[kind]
  const storageMethod = getStorageMethod()

  if (storageMethod === 'redis') {
    const redis = getRedisClient()
    if (!redis) throw new Error('Redis configured but client unavailable')
    return redis.get(keys.redisKey(email, deploymentId))
  }

  const now = new Date()
  const [record] = await db
    .select({ value: verification.value })
    .from(verification)
    .where(
      and(
        eq(verification.identifier, keys.dbIdentifier(email, deploymentId)),
        gt(verification.expiresAt, now)
      )
    )
    .limit(1)

  return record?.value ?? null
}

/**
 * Lua script for atomic OTP attempt increment in Redis.