Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Tenant Login Allows Wrong Tenant Code #4

Open
Deepakpyt opened this issue Nov 26, 2024 · 0 comments
Open

Tenant Login Allows Wrong Tenant Code #4

Deepakpyt opened this issue Nov 26, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@Deepakpyt
Copy link
Collaborator

Deepakpyt commented Nov 26, 2024

Description:
When a tenant attempts to log in with an incorrect tenant code, the system does not properly validate and prevent access. This may lead to unintended access or confusion for the users.


Steps to Reproduce:

  1. Navigate to the login page.
  2. Enter a valid username and password.
  3. Enter an incorrect tenant code.
  4. Click the "Login" button.

Expected Behavior:

  • The system should display an error message indicating that the tenant code is invalid.
  • Login should not proceed with an incorrect tenant code.

Actual Behavior:

  • The system allows login or does not display a clear error message, leading to potential security concerns.

Impact:

  • Users may gain unintended access, or legitimate users may face confusion during login.

Additional Context:

  • The issue may stem from missing or improper validation in the backend logic or API endpoint handling the login request.
  • Logs show no tenant code validation errors when submitting incorrect codes.
@Deepakpyt Deepakpyt added the bug Something isn't working label Nov 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant