Android app displays list of devices to unauthenticated users
Open
- Dominant language
- Go
- Stars
- 9.2k
- Forks
- 1.3k
- PR merge metrics
- PR metrics pending
Description
All a user needs is my username to get a list of my devices?
You shouldn't get anything until after you've provided a correct password.
Contributor guide
No contributing guide indexed for this repository
Research direction
No files, tests, or entry points are named in the issue. Reproduce the Android device-list view while unauthenticated, then trace the request and authentication boundary; done means an unauthenticated user cannot retrieve the device list and an authenticated user still can.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- android, react-native
- Domain
- authentication, mobile, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100