Otp login + profile create or fetch #9
Conversation
Arkmati
requested review from
Anvisimi,
yathu25,
thoriritu,
Aakashdarsi and
Krishna-Rishi
…or admin email id matching.
…il and create profile
…_auth # Conflicts: # src/main/java/sg/edu/nus/iss/shopsmart_backend/utils/WSUtils.java
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| @PostMapping("/register/generateOtp/{profileType}") | ||
| public CompletableFuture<ResponseEntity<JsonNode>> generateOtpForRegister(@PathVariable String profileType, @RequestBody JsonNode requestBody, | ||
| HttpServletRequest request, HttpServletResponse response){ | ||
| log.info("Starting flow for generate OTP for registration for profileType: {}", profileType); |
Check notice
Code scanning / SonarCloud
Logging should not be vulnerable to injection attacks Low
| @PostMapping("/register/verifyOtp/{profileType}") | ||
| public CompletableFuture<ResponseEntity<JsonNode>> verifyOtpForRegister(@PathVariable String profileType, @RequestBody JsonNode requestBody, | ||
| HttpServletRequest request, HttpServletResponse response){ | ||
| log.info("Starting flow for validate OTP and createProfile for registration for profileType: {}", profileType); |
Check notice
Code scanning / SonarCloud
Logging should not be vulnerable to injection attacks Low
| @PostMapping("/login/generateOtp/{profileType}") | ||
| public CompletableFuture<ResponseEntity<JsonNode>> generateOtpForLogin(@PathVariable String profileType, @RequestBody JsonNode requestBody, | ||
| HttpServletRequest request, HttpServletResponse response){ | ||
| log.info("Starting flow for generate OTP for login for profileType: {}", profileType); |
Check notice
Code scanning / SonarCloud
Logging should not be vulnerable to injection attacks Low
| @PostMapping("/login/verifyOtp/{profileType}") | ||
| public CompletableFuture<ResponseEntity<JsonNode>> verifyOtpForLogin(@PathVariable String profileType, @RequestBody JsonNode requestBody, | ||
| HttpServletRequest request, HttpServletResponse response){ | ||
| log.info("Starting flow for validate OTP and createProfile for login for profileType: {}", profileType); |
Check notice
Code scanning / SonarCloud
Logging should not be vulnerable to injection attacks Low
| @@ -54,25 +49,116 @@ | |||
| apiRequestResolver.setHeaders(headers); | |||
|
|
|||
| // Extract query parameters | |||
| log.info("{} Extracting query parameters from request {}", apiRequestResolver.getCorrelationId(), request.getParameterMap()); | |||
Check notice
Code scanning / SonarCloud
Logging should not be vulnerable to injection attacks Low
| }); | ||
| } | ||
| private CompletableFuture<String> fetchUserIdForEmail(ApiRequestResolver apiRequestResolver, String email, String profileType){ | ||
| log.info("{} fetching user id for email {} for profileType {}", apiRequestResolver.getLoggerString(), email, profileType); |
Check notice
Code scanning / SonarCloud
Logging should not be vulnerable to injection attacks Low
…_auth # Conflicts: # src/main/java/sg/edu/nus/iss/shopsmart_backend/controller/ApiController.java
|
No description provided.