Verification codes

Choose how long people must wait before requesting another email code. Current countdowns finish normally; changes apply to new code requests.

@csrf @method('PUT')Customer code resend cooldown (seconds)Receipt verification, customer email sign-in and the remaining-spins checker.Admin code resend cooldown (seconds)Admin sign-in and sensitive Owner action codes.

Allowed: 30–300 seconds. Recommended: 60 seconds. Code expiry, incorrect-attempt limits and other request limits stay unchanged.