gray-mueller / gray-mueller/food-delivery-app-android-studio-java
Login authentication security issue
Open
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Login endpoints where I can login as any user without a password just with type: "google"
Contributor guide
Research direction
Start by reproducing the reported login behavior through the login endpoints, using the issue's Google type case. Trace the authentication flow to determine how the user identity is accepted without a password. Done means the unauthorized login path is prevented and equivalent authentication cases are covered by tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- api, authentication, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100