gray-mueller / gray-mueller/deliveroo-clone-app-using-react-js
Login authentication security issue
Open
- Dominant language
- JavaScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Login endpoints where I can login as any user without a password just with type: "google"
Contributor guide
Research direction
The issue names no file, test, or entry point. Start by reproducing the login endpoint behavior with type set to "google", then trace the authentication flow to determine why an arbitrary user can log in without a password. Done means the reported passwordless access is prevented and the behavior is covered by an appropriate test.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript
- Domain
- api, authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100