Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

False Credentials but it still has a success pop-up #243

Open
HoangMinhKhoiPham opened this issue Apr 15, 2024 · 1 comment
Open

False Credentials but it still has a success pop-up #243

HoangMinhKhoiPham opened this issue Apr 15, 2024 · 1 comment
Labels
bug Something isn't working

Comments

@HoangMinhKhoiPham
Copy link

Describe the bug

When attempting to log in with incorrect credentials on the login page, a success pop-up erroneously appears, indicating successful authentication.

To Reproduce

Steps to reproduce the behavior:

Navigate to the login page.
Enter false credentials (invalid username/password combination).
Click on the login button.
Observe the success pop-up erroneously indicating successful authentication.
Expected behavior

Upon entering false credentials, the system should display an error message indicating unsuccessful authentication rather than a success pop-up.

Screenshots

N/A

Desktop (please complete the following information):

N/A

Smartphone (please complete the following information):

N/A

Additional context

This issue poses a significant security risk as it falsely signals successful authentication, potentially granting unauthorized access to the system.

@hieuwu
Copy link
Owner

hieuwu commented Apr 15, 2024

Thank you for pointing this out. I’ll add more creential validation to improve this flow

@hieuwu hieuwu added the bug Something isn't working label Apr 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants