How to get mac address from mikrotik in your server?

Question

Mikrotik

I authorize iOS users on public WiFi via phone. At the first login on any http request, I redirect the user to authorization, showing the "Enter phone number" form. Upon completion, I send an SMS and ask you to enter it. The user enters sms, watches an ad, the radius authorizes him and saves a pair of mac-phones to the database. Everyone is happy. When I log in again, I need to find out the user's mac not on the radius, but in my server in order to decide whether this is a new user or a repeated one.
Mikrotik, of course, when redirecting, adds the user's mac address to the URL (the URL becomes: https://login.wi-fi.ru/am/UI/Login?org=mac& client_mac=XX-XX-XX-XX-XX-XX&ForceAuth=true), but the same URL can be easily faked. How can I find out the mac address of a freshly connected user, being 100% sure that it is not a fake from the user's side? Yes, there can be dozens of connections at the same time, how to catch and identify them on a radius is a separate issue.

Answer 1

we have implemented a hotspot in our network exclusively by the forces of Mikrotik and radius.
I'm wondering - how do you get a user into the service network between the hotspot and the radius in order to fake something there?
And dozens of connections for the radius - it's ridiculous. After the throw of light, I have 40k clients simultaneously authorized ... And you have dozens here ....