code4romania / code4romania/onghub

[Reset password] Platform allows user to request "reset password" for emails that are not used for an account

Open
#483 0 comments 0 reactions 0 assignees View on GitHub
bug :bug:
Dominant language
TypeScript
Stars
6
Forks
5
PR merge metrics
No merged PRs in 30d

Description

**Describe the bug**
Tested "forgot password" feature, inputting a random email address, without first creating an account using that email address.
The platform allows the user to input the email, and proceeds to informing the user "a reset email was sent to the email address", but the email is never sent as there is actually no previously created account to be recovered. This behavior is confusing for the user as it creates the impression that the account exists.

**Steps to reproduce the behavior**
1. Go to NGO Hub login screen (production or staging environment)
2. Click on 'Forgot my password' button
3. Input a new email address that was not previously used for an NGO Hub account
4. Submit request
5. See current behavior

**Expected behavior**
If an unused email (an email that was not previously used to create an NGO Hub account) is inputted in the 'forgot my password' screen, when clicking on 'reset my password' button, an error message is displayed, informing the user there is no account that uses this email:
"Nu există un cont care utilizează această adresă de email. Introduceți altă adresă." / "There is no account for this email. Enter other email."
and user is not allowed to proceed to the next step in the 'forgot my password' flow.

**Screenshots**
Current behavior:
![Screenshot 2024-05-17 at 14 58 00](https://github.com/code4romania/onghub/assets/95479576/3407b9a2-abd8-4c2c-8e32-f6af18e4b673)
![image](https://github.com/code4romania/onghub/assets/95479576/abed0a06-ffac-4548-805e-d09cb80c6724)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.