Bug #166
openAuthentication Bypass - Dashboard Accessible Without Login
0%
Description
Launch the application in Chrome.
Open the Login page: http://3.26.33.162:85/
Enter valid credentials and log in.
Navigate to the Dashboard.
Copy the Dashboard URL (http://3.26.33.162:85/dashboard).
Open a new browser or an Incognito window.
Paste the copied Dashboard URL into the address bar and press Enter.
Observe the behaviour.
Actual Result:
The Dashboard page opens directly without prompting the user to log in, allowing unauthorized access to the application.
Expected Result:
The application should validate the user's authentication before granting access to the Dashboard. If the user is not logged in or the session is invalid, the system should redirect the user to the Login page and request valid credentials.
Subtasks
Related issues
No data to display