diff --git a/server/routes/login.ts b/server/routes/login.ts index 51a21ac..ab2de76 100644 --- a/server/routes/login.ts +++ b/server/routes/login.ts @@ -23,7 +23,7 @@ async function login(req:Request,res:Response) { const users = await db_ops.activated_user.find_user_by_email(email); if (users.length === 0) { await crypto_ops.check_password("Random_text_qwfqwfg", "$2b$10$xKgSc736RxzT76ZMGyXMLe1Dge99d4PLyUOv60jpywAWJwftYcgjK"); // PROTECTION AGAINST TIMING ATTACK - res.json({ + res.status(403).json({ message: MESSAGE_FOR_AUTH_ERROR }) } else { diff --git a/server/routes/signup.ts b/server/routes/signup.ts index 6a2b7ce..41c62e3 100644 --- a/server/routes/signup.ts +++ b/server/routes/signup.ts @@ -31,7 +31,7 @@ async function signup(req:Request,res:Response) { }) } else { console.log(users) - res.json({ + res.status(403).json({ message: 'User with same email is already registered' }) }