diff --git a/backend/api/views/otp_bypass_token.py b/backend/api/views/otp_bypass_token.py
index db7e7a80..86541b67 100644
--- a/backend/api/views/otp_bypass_token.py
+++ b/backend/api/views/otp_bypass_token.py
@@ -25,6 +25,7 @@ def get_permissions(self):
 
         return [IsTeacher()]
 
+    # TODO: replace this custom action with bulk create and list serializer.
     @action(detail=False, methods=["post"])
     def generate(self, request: Request):
         """Generates some OTP bypass tokens for a user."""