Description:
Currently, there is an issue where users are able to access protected pages even when they are not logged in. This poses a security risk as sensitive information may be accessed by unauthorized users.
Steps to Reproduce:
Log out of the application.
Navigate to the URL of a protected page.
Notice that the page loads successfully without requiring authentication.
Expected Behavior:
Users should not be able to access protected pages without logging in. Access should be restricted to authenticated users only.
Impact:
This issue compromises the security of the application and exposes sensitive information to unauthorized users.
Priority:
High
Proposed Solution:
Implement proper authentication checks on protected routes to ensure that only logged-in users can access them. This may involve updating route guards or middleware to verify the user's authentication status before allowing access to protected pages.
Additional Information:
This issue affects all users of the application.
It is crucial to address this issue promptly to mitigate the risk of unauthorized access to sensitive data.
websharkdev
commented
3 months ago
Description: Currently, there is an issue where users are able to access protected pages even when they are not logged in. This poses a security risk as sensitive information may be accessed by unauthorized users.
Steps to Reproduce:
Expected Behavior: Users should not be able to access protected pages without logging in. Access should be restricted to authenticated users only.
Impact: This issue compromises the security of the application and exposes sensitive information to unauthorized users.
Priority: High
Proposed Solution: Implement proper authentication checks on protected routes to ensure that only logged-in users can access them. This may involve updating route guards or middleware to verify the user's authentication status before allowing access to protected pages.
Additional Information: