hackclub / high-seas

🏴‍☠️ It's better to be a pirate than join the navy!
https://highseas.hackclub.com
39 stars 10 forks source link

It is possible to make 2 accounts under 1 email in hakatime, which causes the shipyard to reset. #725

Open sirbread opened 1 day ago

sirbread commented 1 day ago

If hakatime is down, and you try to log in, it says "invalid password." That's fine, but if you click "reset password" (assuming a person does not know hakatime is down), they will accidentally create a separate account under the same email. The only way to log back into hakatime without losing your stuff is logging in with slack ID rather than your email, since logging in with email directs you to this "new account."

Once you try logging into highseas using this "new" account (assuming logging in with email since that's what most people do), highseas completely resets your API key, as well as db's and active ships. This new account will overwrite your old account's stuff.

This rewrite only occurs sometimes (as far as I know), as it didn't happen to me but to my friend, even though this "dual account" occurred to both of us.