|
|
|
|
|
by gildenFish
112 days ago
|
|
It is basically impossible to disallow the token to work that way on a technical level. It would be akin to trying to trying to set up a card scanner that can deny a valid card depending on who is holding it. The only way to prevent it from working is analyzing usage patterns/details/etc in some form or fashion. Similar to stationing a guard as a second check on people whose cards scan as valid. |
|
Either the token works for all times, or works until it doesn't, or does not work at all.
Punishing the account for using a token you have vended for the exact same purpose is extremely poor product design.