From f28f13dea1e6f52ead022572883fe459bd3931f4 Mon Sep 17 00:00:00 2001
From: Klaus-Uwe Mitterer <git@kumi.email>
Date: Mon, 24 May 2021 14:39:43 +0200
Subject: [PATCH] Fix behaviour of Token 'used' property

---
 smsauth/views.py | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/smsauth/views.py b/smsauth/views.py
index 1ad2fec..7b85663 100644
--- a/smsauth/views.py
+++ b/smsauth/views.py
@@ -18,8 +18,9 @@ def storeToken(token):
 
 def useToken(token):
     retval = False
-    for t in Token.objects.filter(token=str(token).zfill(6)): # pylint: disable=E1101
+    for t in Token.objects.filter(token=str(token).zfill(6), used=False): # pylint: disable=E1101
         t.used = True
+        t.save()
         if timezone.now() - timedelta(seconds=300) < t.sent:
             retval = True
     return retval
@@ -53,4 +54,4 @@ def sendMessage(text, recipient):
         sendSMS(text, phone)
 
     if telegram:
-        sendTelegram(text, telegram)
\ No newline at end of file
+        sendTelegram(text, telegram)