assemblee-virtuelle / assemblee-virtuelle/Semantic-Bus
authWebService wrong use of config
- Dominant language
- JavaScript
- Stars
- 57
- Forks
- 10
- Avg merge
- 8m
- Merged PRs (30d)
- 55
Description
I don't know if it's a normal behavior or not
In authWebService.js, we try to get to config.recovery_passwordToken and verify_mailtoken but they don't exist in the config file.
Warning on the security, why is the value of secret, "secret" in the config file ??? is it normal?
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading authWebService.js and the config file referenced in the issue. Check how recovery_passwordToken, verify_mailtoken, and the secret value are obtained, then determine the expected configuration and security behavior. Done means the missing settings and secret handling are clearly resolved and the authentication service no longer raises the reported concern.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- authentication, backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100