tohuwabohu-io / librefit

OpenSource calorie tracker using kotlin, quarkus, postgresql, SvelteKit and OpenAPI 3
https://libre.fit/
GNU General Public License v3.0
1 stars 0 forks source link

E-Mails entered are not validated strictly enough #91

Closed tohuwabohu-io closed 1 month ago

tohuwabohu-io commented 1 month ago

Describe the bug Only valid E-Mails should be able to register. Currently it's possible to provide nonsensical values.

To Reproduce Steps to reproduce the behavior:

  1. Go to 'Not signed up yet?' on the landing page.
  2. Enter any value that contains an '@' and is longer than 4 characters, e.g. ab@cd
  3. Confirm

Expected behavior The input field should be marked as invalid and registration should be rejected.

Additional context Validation must be performed in both frontend and backend. An E-Mail must contain a prefix, a '@' character and a domain part.