If you sign up with a plus sign in your email, your account can't be used or recovered

Open
#1,571 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
4/5
Estimated time
3-5 days
Newbie friendliness
35/100
Issue type
Bug
Clarity
Mostly clear
Activity status
Stale
Tech stack
javascript
Domain
authentication, backend

Research direction

Reproduce the problem by signing up with an address containing a plus sign, then test login and password recovery for that account. Trace the authentication and recovery entry points involved in those flows. Done means plus-address accounts can log in with the correct password and complete password recovery without an internal error.

Written by the indexing model from the issue text.

Description

I signed up for the username "solidgold" with the email address "jon+solidtest@snap.com" and this caused a situation where I can't log into the account because it thinks my password is wrong (even though my password is correct) and I can't do a password reset because there is an internal error when trying to do the password reset. Screenshots below:
image
image

Dominant language
JavaScript
Stars
1.8k
Forks
308
No merged PRs in 30d

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from nodeSolidServer/node-solid-server

All issues in nodeSolidServer/node-solid-server

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.