COPS-IITBHU / COPS-IITBHU/BugHunt-COPS-Week
Insecure token authentcation (Day 1-2)
Open
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
- Sensitive data in token payload with insecure token storage
- No session management
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by locating the token authentication, token storage, and session-management entry points in the repository. Review how sensitive data is placed in tokens and how tokens are stored, then define the required behavior for secure storage and session management. Done means sensitive data is no longer exposed in token payloads and sessions are managed securely.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100