Improve CSRF Token implementation for multiuser #2

Closed
opened 2025-03-29 18:39:09 -05:00 by ITwrx · 1 comment
Owner

Works fine for single user. Not so much for multi-user. Needs investigation.

Works fine for single user. Not so much for multi-user. Needs investigation.
ITwrx added the
accepted
design flaw
labels 2025-03-29 18:39:09 -05:00
Author
Owner

This has been reworked for authenticated users. The login form (unauth'd users) uses a more basic mechanism, which might not work properly if two users are trying to login at the same time. May open a separate low priority issue for tracking improvements to that, but closing this, as this was the important use case.

This has been reworked for authenticated users. The login form (unauth'd users) uses a more basic mechanism, which might not work properly if two users are trying to login at the same time. May open a separate low priority issue for tracking improvements to that, but closing this, as this was the important use case.
ITwrx closed this issue 2025-03-30 16:37:35 -05:00
Sign in to join this conversation.
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: ITwrxOrg/SimpleSiteManager#2
No description provided.