search

simonseo / no-mfa-please-2

Re-implementation with better security in Django (In progress)
https://duo-mfa.online
2 stars 0 forks source link

Same generation request shouldn't be processed more than once #18

Open simonseo opened 4 years ago

simonseo commented 4 years ago

If I reload the results page after generating a passcode, the same request gets sent to the server.

Reloading a page shouldn't generate a new passcode. The form should include some sort of an expiring identifier so that the forms work only once.