issues Search Results · language:Dune language:JavaScript language:JavaScript language:C# language:JavaScript language:Java
Filter by
39.3M results
package.json pins mongoose@^5.9.6. Mongoose 5 is EOL and no longer receives security fixes. Plan an upgrade to
Mongoose 7/8, which also removes the deprecated connection options currently used in config/mongoose.js. ...
backend
dependencies
security
Background
A senior-user DX review praised AsiBackbone s separation of concerns and predictable API, but identified the domain
vocabulary as a friction point for new adopters.
Terms such as Audit Residue, ...
documentation
config/mongoose.js connects to process.env.MONGODB_URI_PRODUCTION regardless of environment, and uses deprecated options
(useNewUrlParser, useUnifiedTopology, useFindAndModify). There is no separate dev/test ...
backend
bug
middleware/checkObjectId.js is present but not applied on any route. Endpoints that take _id (delete/update metric,
wage, group) will throw a CastError → 500 when given a malformed ObjectId. Apply checkObjectId ...
backend
bug
We need to investigate how user groups are currently visible between users and identify whether we need some
rework/extra permissions to allow the functionality we need.
Scenarios we should be supporting: ...
controllers/wage.js getUserMetricsAllTodayWages loads all of a user s wages with Wage.find({ userId }) and filters them
in JavaScript by year/month/day.
Problems:
- Does not scale — fetches the entire ...
backend
bug
performance
The API authenticates via the x-auth-token header and a JWT containing { user: { id } }. This is fragile and
undocumented. Document the auth contract (header name, token payload, expiry) in the README ...
backend
documentation
Please confirm the following before submitting a Bug Report
- [x] I have searched existing open and closed issues and did not find a duplicate
Greenshot version
1.3.290
Describe the bug
I am using ...
bug
no-stack-trace
utils/auth.js exports createJWT(email, userId, duration) producing a payload { email, userId, duration }, but
controllers/auth.js signs its own token with payload { user: { id } } and the middleware reads ...
backend
bug
cleanup
In controllers/auth.js register, there is a stray line Metrics.insertM between hashing the password and await
user.save(). It references a non-existent method, is not called, and has no effect. It looks ...
backend
bug
cleanup

Learn how you can use GitHub Issues to plan and track your work.
Save views for sprints, backlogs, teams, or releases. Rank, sort, and filter issues to suit the occasion. The possibilities are endless.Learn more about GitHub IssuesProTip! Restrict your search to the title by using the in:title qualifier.