Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[FIX] Invalid domain part allowed in email during request for forgot-password #921

Open
johnson-oragui opened this issue Aug 21, 2024 · 0 comments · Fixed by #924
Open
Assignees

Comments

@johnson-oragui
Copy link
Collaborator

Describe the bug
During when a request is been made for password reset, invalid email is allowed(the domain part). extra characters are allowed in the domain part of the email, while the local part is properly validated.

To Reproduce
Steps to reproduce the behavior:

  1. Go to 'https://staging.api-python.boilerplate.hng.tech/api/v1/auth/forgot-password'
  2. Enter into the email field '[email protected]'
  3. Click on execute
  4. See error (Invalid email is allowed)

Expected behavior
The server should return an error message invalidating the wrong email format entered by the user.

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

  • Browser brave
  • Version 22

INVALID EMAIL ENTERED
bug forgot password allow invalid email

INVALID EMAIL ALLOWED
bug forgot password sent to user

Additional context
The forgot-password endpoint should be able to validate the email it receives, and should be independent of any other endpoint for validation.

@johnson-oragui johnson-oragui self-assigned this Aug 21, 2024
@johnson-oragui johnson-oragui linked a pull request Aug 22, 2024 that will close this issue
9 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant