gray-mueller / gray-mueller/ride-sharing-solution-application
Login authentication security issue
Open
- Dominant language
- TypeScript
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
Describe the bug
Login endpoints where I can login as any user without a password just with type: "google"
Contributor guide
Research direction
Start by locating the login endpoints and the code path handling type: "google" authentication. Reproduce whether a user can log in as another account without a password, then trace how the requested account is selected and how identity is verified. Done means the login flow rejects unauthenticated attempts and tests cover this case.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- api, authentication, backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100