[Koha-bugs] [Bug 28786] Two-factor authentication for staff client - TOTP

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28786 --- Comment #138 from Jonathan Druart <jonathan.druart+koha@gmail.com> --- Created attachment 132155 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=132155&action=edit Bug 28786: (QA follow-up) Check the returned CSRF token We're doing this in the registering stage and at disabling. Test plan: Ënable two-factor auth but logout/login on another tab. You should get the Wrong CSRF token when submitting. Do similar thing while disabling. Verify that you can register / disable when in the same session. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.