search

paragonie / anti-csrf

Full-Featured Anti-CSRF Library
https://paragonie.com/projects
GNU Affero General Public License v3.0
297 stars 52 forks source link

Update about the Life time Token validation #42

Open rouaks opened 3 years ago

rouaks commented 3 years ago

If tokenLifeTime is initialized and higher than the current date, the token will be deleted after the validateRequest. I think that reusable->deleteToken() should return false to ensure that the token stay valid during his life time.