Deleted Account Can Still Log In with Error Message ("fullName" must be a string)
🐛 Summary
After deleting an account on https://community.arcblock.io/, the user can still log in using the deleted account credentials. Additionally, an error message ("fullName" must be a string) appears instead of a clear notification that the account has been deleted. This violates privacy and security expectations.
🔁 Steps to Reproduce
- Navigate to:
https://community.arcblock.io/ - Delete an account via Account Settings.
- Attempt to log in using the deleted account credentials.
- Observe that:
- The login is successful despite the account being deleted.
- An error message appears:
("fullName" must be a string). - The user can still interact with the platform.
📉 Severity
Critical – Violates user privacy and security by allowing access to a deleted account.
🛠️ Expected Behavior
- Deleting an account should:
- Permanently disable login for the deleted account.
- Show a clear error message: text
javascript "Your account has been deleted and cannot be accessed." - Prevent any further activity.
🧪 Actual Behavior
- The deleted account can still log in and interact with the platform.
- A cryptic error message appears instead of a user-friendly notification.
1 reply
I can't reproduce it. Please provide more detailed steps to reproduce the issue.