make sure links are single-used

OhadR / authentication-flows

oAuth2 sample: auth-server, resource server and client. "Authentication-Flows" is also a sub-module here.

42 stars 54 forks source link

make sure links are single-used #71

Closed OhadR closed 7 years ago

OhadR commented 7 years ago

currently, the user can click again and again on the activation link he got after account-creation, and server does not know the link has already been used before.

same for forgot password, etc.

issue was opened in Authentication-Flows: https://github.com/OhadR/Authentication-Flows/issues/21