2.7.3 Out of band authentication requests are usable onceΒΆ

Verify that the out of band verifier authentication requests, codes, or tokens are only usable once, and only for the original authentication request.

Level 1 X
Level 2 X
Level 3 X
CWE NIST
287 5.1.3.2