OpenJUB / dreamjub

Jacobs Directory Exploration and Mapping Server.
1 stars 4 forks source link

Login Links Marked as Used before Clicked #65

Open marco-david opened 5 years ago

marco-david commented 5 years ago

Login Links are occasionally are marked as used before the user can actually use the link to log in. This results in dreamjub displaying a general log-in error. @kuboschek speculated that this happens because e-mail clients try to pre-buffer the website thereby placing a GET request which uses the token. The login token could either only be marked as 'used' once the website actually loaded; or the login token system could be changed so that tokens become invalid after e.g. three minutes instead of after the first use.

I am not a contributing developer to this project, nor experienced with Django, and thus can't judge the proposed solutions' feasibility, nor if the actual problem is caused by the aforementioned.