usnistgov / SpectrumBrowser

ITL
12 stars 11 forks source link

Do valid data checks on the server, on minimal checks on client #138

Closed jkubNTIA closed 9 years ago

jkubNTIA commented 9 years ago

Instead of having checks on both the server and client for valid data, just do checks on the server. On the client I think we should just do minimal checks like, 'make sure that user entered a non-blank string > 0'. Especially for the account creation code, it does not make sense to check a valid password on both the client and the server. Or a valid email on both the client and the server. If we people want to use different clients, it is much better to do all the data validity checks on the server.

jkubNTIA commented 9 years ago

I have changed this for the account management code to create a new account. I need to change this on the user account code too.