Function loginWithRecovery

spec/vulnerabilities.spec.js:4881–4895

()

      // Send concurrent login requests with the same recovery code
      const loginWithRecovery = () =>
        request({
          method: 'POST',
          url: 'http://localhost:8378/1/login',
          headers: mfaHeaders,
          body: JSON.stringify({
            username: 'mfauser',
            password: 'password123',
            authData: {
              mfa: {
                token: recoveryCode,
              },
            },
          }),
        });

      const results = await Promise.allSettled(Array(10).fill().map(() => loginWithRecovery()));