I'm trying to figure out how/when an authentication attempt ever expires? If I authenticate once, what prevents me from always being authenticated
In our smart contract we implemented a block timeout. This forces any specific address to authenticate once per day.
Are you doing that on chain? How do you track when a day has passed from a block? Or do you do it in the API level