You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
As @Oliversw pointed out this morning, our authentication methods are actually pretty shaky.
Whether protected pages are rendered is just dependent on a boolean value in our state (which is updated after checking the login details against the Airtable API).
All it takes to access these pages, therefore, is just switching isAuthenticated to true in React dev tools 😱 😱
We're now researching how to remedy this. Likely gonna need JWT, bcrypt etc.! Also looking into auth0.
As @Oliversw pointed out this morning, our authentication methods are actually pretty shaky.
Whether protected pages are rendered is just dependent on a boolean value in our state (which is updated after checking the login details against the Airtable API).
All it takes to access these pages, therefore, is just switching
isAuthenticated
totrue
in React dev tools 😱 😱We're now researching how to remedy this. Likely gonna need JWT, bcrypt etc.! Also looking into auth0.
Article: https://medium.com/@romanchvalbo/how-i-set-up-react-and-node-with-json-web-token-for-authentication-259ec1a90352
The text was updated successfully, but these errors were encountered: