You should do server-side validation.

    {
        "success": true,
        "seconds": 300000000,
        "code": "20r5M5y3ec"
    }