gray-mueller / gray-mueller/foodpanda-clone-using-react-native
Login authentication security issue
Open
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Login endpoints where I can login as any user without a password just with type: "google"
Contributor guide
Research direction
Start by locating the login endpoints and the Google sign-in handling in the TypeScript/React Native project, then reproduce the reported authentication behavior. Done means a request containing only type: "google" cannot log in as an arbitrary user and authentication requires the intended credentials or verified identity.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- react-native, typescript
- Domain
- api, authentication, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 15/100