Open neilyoung opened 8 years ago
I think it is a matter of wrong logical operator precedence. Change line 47 in backend/user-routes.js to
if (!(user.password === req.body.password)) {
I can't seem to reproduce this--I can't log back in with the correct username but wrong password.
After successful Login/Logout sequence I can login again by providing the correct username together with a wrong password.