Verify that two-factor setup properly handles CSRF

Flask-Middleware / flask-security

Quick and simple security for Flask applications

MIT License

624 stars 155 forks source link

Verify that two-factor setup properly handles CSRF #905

Closed jwag956 closed 5 months ago

jwag956 commented 5 months ago

Two-factor setup has 2 modes - initial setup prior to a user even signing in for the first time - and a more normal change two-factor workflow. It isn't clear that in the second case - CSRF is properly checked.