gray-mueller / gray-mueller/milk-ordering-platform-react-native
Login authentication security issue
Open
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Login endpoints where I can login as any user without a password just with type: "google"
Contributor guide
Research direction
Locate the login endpoints and the Google authentication path, then reproduce the reported behavior using type: "google" without a password. Done means unauthorised users can no longer log in as arbitrary accounts through this path, with appropriate coverage for the authentication flow.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- react-native, typescript
- Domain
- authentication, backend-api-design, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100