验证码超时

Question

Why do I need a captcha timeout implementation. For what it is good for?

Look on github golang captcha link, expiration time is here 10 minutes. For which reason do the programmer implement the expiration time for captcha.

Answer 1

package captcha

import "github.com/dchest/cap

To make captchas one-time, the package includes a memory storage that stores captcha ids, their solutions, and expiration time. Used captchas are removed from the store immediately after calling Verify or VerifyString, while unused captchas (user loaded a page with captcha, but didn't submit the form) are collected automatically after the predefined expiration time.

Read the captcha package documentation.