You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
During user registration, users are able to create accounts with invalid values of roll numbers. For example:
username, helloFOSS, notarollnumber123 (non-roll number strings)
23M9999 (invalid roll numbers)
26B1001 (roll numbers that are technically valid, but of future batches)
There is no validation being performed to ensure that the roll number is valid.
To Reproduce
Steps to reproduce the behavior:
Run the backend
Access the user registration end-point
Try to create a user with an invalid roll number
No error, user is created
Expected behavior
In the case of invalid values for the roll number, the backend must not create the user, and respond with an error.
Screenshots
None
Desktop (please complete the following information):
OS: Windows
Browser: Brave
Additional context NOTE: The implemented approach should account for users created for admin access, with "roll numbers" that technically act as usernames (ex. "admin"). Such users will always be created manually on the database level however, so it not a big concern.
The text was updated successfully, but these errors were encountered:
Describe the bug
During user registration, users are able to create accounts with invalid values of roll numbers. For example:
There is no validation being performed to ensure that the roll number is valid.
To Reproduce
Steps to reproduce the behavior:
Expected behavior
In the case of invalid values for the roll number, the backend must not create the user, and respond with an error.
Screenshots
None
Desktop (please complete the following information):
Additional context
NOTE: The implemented approach should account for users created for admin access, with "roll numbers" that technically act as usernames (ex. "admin"). Such users will always be created manually on the database level however, so it not a big concern.
The text was updated successfully, but these errors were encountered: