nestjs-blog

nestjs-blog copied to clipboard

Bumps [shelljs](https://github.com/shelljs/shelljs) from 0.8.4 to 0.8.5. Release notes Sourced from shelljs's releases. v0.8.5 This was a small security fix for #1058. Commits 70668a4 0.8.5 d919d22 fix(exec): lockdown file permissions (#1060)...

dependabot[bot]

Bump tmpl from 1.0.4 to 1.0.5

3

Bumps [tmpl](https://github.com/daaku/nodejs-tmpl) from 1.0.4 to 1.0.5. Commits See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter...

dependabot[bot]

Bump bcrypt from 3.0.8 to 5.0.0

1

Bumps [bcrypt](https://github.com/kelektiv/node.bcrypt.js) from 3.0.8 to 5.0.0. Release notes Sourced from bcrypt's releases. v5.0.0 Fix the bcrypt "wrap-around" bug. It affects passwords with lengths >= 255. It is uncommon but it's...

dependabot[bot]

Possible security issue

2

Thanks for putting this example together. This line is comparing the password in the database against itself, so it will always assume credentials are valid. https://github.com/bashleigh/nestjs-blog/blob/fbacc0337ef3ecbd367b36369440929ccf517d31/src/auth/auth.service.ts#L25 ```typescript if (!await this.userService.compareHash(auth.password,...

cmann50

Debugging

7

Hi! The great example, but i have a question. How do you debug nest applications? Do you use intellij Idea?

culttm