  def one_time_password
    otp_username = $redis.get "otp_#{params[:token]}"

    if otp_username && user = User.find_by_username(otp_username)
      log_on_user(user)
      $redis.del "otp_#{params[:token]}"
      return redirect_to path("/")
    else
      @error = I18n.t('user_api_key.invalid_token')
    end

    render layout: 'no_ember'
  end
When an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.