Hosted app: sharing reveals whether an email has an account

Open Beginner friendly
  • Is something wrong?
#27 1 comment 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
83/100
Issue type
Bug
Clarity
Clearly specified
Activity status
Active
Tech stack
typescript
Domain
backend, security

Research direction

Read apps/mutinybim-web/src/app.ts and locate the POST /models/:id/share handler. Compare its response for emails with and without accounts, then make both outcomes return the same answer as the issue’s companion invitation flow: “Invitation sent.” Done when the response no longer reveals whether an email has an account.

Written by the indexing model from the issue text.

Description

area: web-app bug

What happens

On Share, entering an email with no account answers "No MutinyBIM account here uses ". Any signed-in person can use this to check whether someone has an account.

What should happen

The same answer whether or not the email has an account. The simplest fix is the invitation flow in the companion issue: "Invitation sent" either way.

Where

apps/mutinybim-web/src/app.ts, the POST /models/:id/share handler.

Dominant language
TypeScript
Stars
85
Forks
10
Avg merge
1h 28m
Merged PRs (30d)
20

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from permitzip/mutinybim

All issues in permitzip/mutinybim

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.