codersforcauses / codersforcauses/p2s-v2
[BUG] Unverified User login
- Dominant language
- Vue
- Stars
- 2
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
**Problem**
Unverified users can log in using an empty password
**Where/When**
Api authentication logic
**Desired behavior**
- If the verified field on the user object is false, all logins should be blocked.
- When an unverified user has been created, their password is set to "" which is then salted and hashed. This is potentially unwanted behavior.
**Screenshots**
Logging in with an empty password
Unverified user created with "" as their password (hashed value)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.