Skip to content

Two consecutive authentication attempts with the same address conflict #35

@rdig

Description

@rdig
  • Request a nonce
  • Don't sign it
  • Request a second nonce
  • Sign the first nonce
  • Send the request
  • The auth proxy expects a signature for the second nonce at this point and will fail the auth request
  • Continuing, sending the second nonce request will break the whole session object

Here is a screen capture that demonstrates this in the context of the CDapp

redirection.mp4

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions