search

ansopedia / user-service

The Ansopedia User Service is a backend service responsible for managing user accounts and authentication within the Ansopedia learning platform. It provides functionalities like authentication & authorization, profile management.
MIT License
5 stars 4 forks source link

Bug: Weak Passwords Accepted During Sign-Up #48

Closed sanjaysah101 closed 1 month ago

sanjaysah101 commented 1 month ago

Despite implementing a strong password policy, weak passwords are still being accepted during the sign-up process.

Steps to Reproduce

  1. User sign-up api
  2. Enter a password that does not meet the strong password requirements (e.g., less than the required length or lacking special characters).
  3. Complete the sign-up process.

Expected Behavior: The sign-up process should reject weak passwords and prompt the user to enter a stronger password.

Actual Behavior: Weak passwords are being accepted, allowing users to create accounts with insecure credentials.