search

disintar / .github

Feel free to post any issues related to Disintar products
1 stars 1 forks source link

Allow add any telegram nickname to account #13

Closed LetikGit closed 2 years ago

LetikGit commented 2 years ago

Bug Type

Functional

Reproduction steps

  1. Go to profile settings
  2. Login with telegram
  3. Click "Disconnect from telegram"
  4. Repeat request from step 2 to /api/bind_telegram

Actual result

You can add any telegram nickname to profile https://beta.disintar.io/profile/EQAyydOEBX_MQd-xyrDg9Aoxan7uS5eVS75XXxSoU6sAaH7B

Expected result

Check if account belongs to the user

Suggested Severity

Critical

Device

OS: macOS Browser chrome Version 105

Additional Context

No response

LetikGit commented 2 years ago

@tvorogme Looks like critical severity, additional info I sent to DM @disintarsupport

tvorogme commented 2 years ago

Thanks, will look into this.

acadabus commented 2 years ago

Thanks for report, fixed