search

authorizerdev / authorizer

Your data, your control. Fully open source, authentication and authorization. No lock-ins. Deployment in Railway in 120 seconds || Spin a docker image as a micro-service in your infra. Built in login page and Admin panel out of the box.
https://authorizer.dev
MIT License
1.62k stars 166 forks source link

Error logging in with incorrect password #458

Closed rudemex closed 3 months ago

rudemex commented 3 months ago

Version: 1.4.3

Describe the bug

I have Authorizer configured to register user and require email validation, after registering I try to log in with a wrong password, it logs in anyway returning the message “Please check email inbox for the OTP”.

Steps To Reproduce

1- Have Authorizer configured to register user and require email validation. 2- Register a user in http://localhost/app/signup and do not validate by email. 3- Login to http://localhost/app using the previously registered email, but using a wrong password.

Expected behavior

You should not log in, even if the email is not verified, you should validate if the password is correct or not, if it is correct, return the message to validate the email, and if it is incorrect, notify that the data is not correct.

Screenshots

image

Desktop (please complete the following information):

Additional context

lakhansamani commented 3 months ago

@rudemex curious to know if you configured smtp server or not? If not email validation does not work

rudemex commented 3 months ago

hi @lakhansamani , yes, do the smtp configuration with resend, but never verify the email, as there may be a case that the account is never verified via email.

lakhansamani commented 3 months ago

Thank you for sharing I will look into this issue

lakhansamani commented 3 months ago

I was able to debug this. It is more of a UI bug. I am fixing it

lakhansamani commented 3 months ago

@rudemex resolved in 1.4.4