Fuzzing in http raw sequence of requests

[mfocuz]

I have to 2 requests which should be used to test default login, 1st request should return me url, which will later be used for login(it contains some uniq values).

Algorithm is:

1. GET /auth/
2. Parse URL from response -> variable "actionUrl"
3. POST user+password to "actionUrl"

template:

   - raw:                                                                                                                                                                                             
       - |                                                                                                                                                                                            
         GET /auth/ HTTP/1.1                                                                       
         Host: {{Hostname}}                                                                                                                                                                           
         User-Agent: Mozilla/5.0                                                                                                                                                                      
         Accept: text/html,application/xhtml+xml,application/xml                                                                                                                                      
                                                                                                                                                                                                      
       - |                                                                                                                                                                                            
         POST {{html_unescape(actionUrl)}} HTTP/1.1                                                                                                                                                   
         Host: {{Hostname}}                                                                                                                                                                           
         User-Agent: Mozilla/5.0                                                                                                                                                                      
         Content-Type: application/x-www-form-urlencoded                                                                                                                                              
         Cookie: AUTH_SESSION_ID={{authSessId}}; AUTH_SESSION={{authSession}}; KC_RESTART={{jwt}};                                                                                  
                                                                                                                                                                                                      
         username={{username}}&password={{username}}                                                                                                                                                  
                                                                                                                                                                                                      
     cookie-reuse: true                                                                                                                                                                               
                                                                                                                                                                                                      
     payloads:                                                                                                                                                                                        
       username: default_usernames.txt                                                                                                                                                                
     attack: batteringram                                                                                                                                                                             
                                                                                                                                                                                                      
                                                                                                                                                                                                      
     extractors:                                                                                                                                                                                      
       - type: kval                                                                                                                                                                                   
         kval:                                                                                                                                                                                        
           - KC_RESTART                                                                                                                                                                               
         name: jwt                                                                                                                                                                                    
         internal: true                                                                                                                                                                               
                                                                                                                                                                                                      
       - type: kval                                                                                                                                                                                   
         kval:                                                                                                                                                                                        
           - AUTH_SESSION_ID                                                                                                                                                                          
         name: authSessId                                                                                                                                                                             
         internal: true                                                                                                                                                                               
                                                                                                                                                                                                      
       - type: kval                                                                                                                                                                                   
         kval:                                                                                                                                                                                        
           - AUTH_SESSION                                                                                                                                                           
         name: authSession                                                                                                                                                               
         internal: true                                                                                                                                                                               
                                                                                                                                                                                                      
       - type: regex                                                                                                                                                                                  
         attribute: action                                                                                                                                                                            
         name: actionUrl                                                                                                                                                                              
         group: 1                                                                                                                                                                                     
         regex:                                                                                                                                                                                       
           - "form.*action=\"http[s+]://[A-Za-z0-9.-]*(.*?)\""                                                                                                                                        
         internal: true 

What I currently have is nuclei perform step 1 for N users, then takes URL from last response("actionUrl"), and begin to perform step 3 for N users(but always use same actionUrl).

What I expect is to send
GET
POST
GET
POST
etc

[mfocuz]

There is a bug about this:
#1772