Token replay

Verifies against the "token already spent" secret. Proves a captured token cannot be redeemed twice.

Expected HTTP 403 · timeout-or-duplicate

Result

Submit the form to run this case.