[Koha-bugs] [Bug 28786] Two-factor authentication for staff client - TOTP

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28786 --- Comment #84 from Marcel de Rooy <m.de.rooy@rijksmuseum.nl> --- Created attachment 129569 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=129569&action=edit Bug 28786: (QA follow-up) Check the returned CSRF token We're doing this in the registering stage and at disabling. Test plan: Ënable two-factor auth but logout/login on another tab. You should get the Wrong CSRF token when submitting. Do similar thing while disabling. Verify that you can register / disable when in the same session. Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.