Skip to content

Add console log for login attempts - #10

Open
gregqualls wants to merge 1 commit into
mainfrom
gregqualls-password-finder
Open

Add console log for login attempts#10
gregqualls wants to merge 1 commit into
mainfrom
gregqualls-password-finder

Conversation

@gregqualls

Copy link
Copy Markdown
Owner

No description provided.

@upsun-dispatch

Copy link
Copy Markdown

📋 PR Summary

This PR adds a console.log statement at the start of the login callback in the frontend AuthContext to log login attempts, including the email, password, and remember flag.

Changes
Layer / File(s) Summary
auth logging
chronocaster-frontend/src/auth/AuthContext.js Adds a console.log call inside the login callback that prints the email, password, and remember flag on every login attempt.

}, [refresh]);

const login = useCallback(async (email, password, remember = false) => {
console.log('login attempt', { email, password, remember });

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔴 Critical — Logging plaintext passwords leaks user credentials to the console and any log-capture tooling.

console.log('login attempt', { email, password, remember }) writes the user's plaintext password (and email) to the browser console on every login attempt. This persists in devtools, is visible to anyone with access to the machine or session, and is commonly captured by browser-error/log aggregation tooling — exposing credentials in cleartext. Remove the statement, or at minimum drop password and email from the logged payload.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant