factorio-tools / blueprints-database Goto Github PK

• Steam auth
• Username/Password auth
• Reset password flow (ui/email/token generation/etc)
• Sign-up flow (ui/user creation)
• Logout functionality
• Anti-spam/security (Recaptcha V3?/ip limiting/bruteforce protection)

If I am logged in, and then delete my user account through arango, I can still navigate around to protected pages on the front end.

We should implement a proper method to ban/remove users and have their login invalidated

• Ensure NGINX caches don't serve old content
• Published changes should be live near instantly after built
• Investigate if any changes are needed for the services worker

Describe the bug
User account names can be registered with leading spaces and trailing spaces.

To Reproduce
Steps to reproduce the behavior:

1. Create a user account with a new similar to "test123"
2. Logout of the new account
3. Create a user account with the same name "test123"
4. Receive a 'username in use' error
5. Attempt to create a user account with the name "test123 " or " test123" (leading / trailing spaces)
6. Account is created successfully

Expected behavior
For both account names listed in step 5, we should receive a 'username in use' error

Screenshots