search

gcivil-nyu-org / INET-Monday-Fall2023-Team-3

2 stars 4 forks source link

No User Account (Both Email & Password) Check #71

Open louispo0603 opened 11 months ago

louispo0603 commented 11 months ago

First Try: I was logging in using three(3) different password from the provided one for the user "Test5@nyu.edu" and I was able to log in.

It seems the app currently does not check password.

Tested password: testNo.5 Tested password: test Tested password: a

Second Try: This time I didn't enter the email and password, clicked log in and got in.

louispo0603 commented 11 months ago

Actually also because of this issue, I can't really test whether change password and change username

mkZH0740 commented 11 months ago

you are actually not logged in, this is caused by a recent fix about frontend crashing when no graph information is returned from the backend, we accidentally bypassed the login check during that fix, will fix this issue in next iteration