-
Notifications
You must be signed in to change notification settings - Fork 176
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Handle invalid contractId on /login/ request #219
Comments
Acceptance CriteriaLogin
Warning Message "The contract |
question from @marcinbodnar
It has same constraints as account Id + it also needs to be an existing account (i.e. we'd want to query near node for that account). Can be done similarly to user profile component I think (after Chad changed it to work with any account vs current account). |
Problem
If the contractId is wrong in a /login/ (e.g.
login/?contractId=THISDOESNTEXIST
) request from an app, a useless access key is created (or is it?) and the app is forced to identify the error with little to no information.Expected Behavior
If a contractId is invalid, we should prevent the user from going through the /login/ step, and return an error to the app.
Steps to reproduce
contractId=notrealid
and resubmitThe text was updated successfully, but these errors were encountered: