snapCloud
snapCloud copied to clipboard
the POST /users/:username/login route is broken.
Route: POST /users/:username/login Description: Logs a user into the system. Body: password
This route does not work properly. If you have an account, and curl this url:
curl -X POST https://cloud.snap.berkeley.edu/users/someuser/login -H "Content-Type: application/json" -d '{"password": "SomePassword"}
should successfully log in, but it fails when the password string is concatenated with the salt. The salt is NIL, so concatenation fails.