Added changes to fix code duplication issues and security flaws

gatewayservice/gateway-service.test.js

@@ -100,7 +100,6 @@ describe('Gateway Service with token mock', () => {
   it('should forward record request to record service', async () => {
     const response = await request(app)
       .get('/record/testuser').set('token', 'valorDelToken');
-    console.log(response)
     expect(response.statusCode).toBe(200);
     expect(response.body).toHaveProperty('record', "undefined");
   });
@@ -113,7 +112,6 @@ describe('Gateway Service without token mock', () => {
   it('should not verify the token', async () => {
     const response = await request(app)
       .get('/record/testuser');
-    console.log(response)
     expect(response.statusCode).toBe(200);
     expect(response.body).toHaveProperty('record', "undefined");
   });

users/authservice/auth-service.js

@@ -35,7 +35,9 @@ app.post('/login', async (req, res) => {
       return
     }
 
-    const { email, username, password } = req.body;
+    const email = req.body.email.toString();
+    const username = req.body.username.toString();
+    const password = req.body.password.toString();
 
     let user;
     if(username) //Can log in with both

users/userservice/user-service.js

@@ -38,10 +38,10 @@ app.post('/adduser', async (req, res) => {
         }
 
         //Check there is not a user with the same name
-        const userUsername = await User.findOne({username: req.body.username});
+        const userUsername = await User.findOne({username: req.body.username.toString()});
 
         //Check there is not a user with the same name
-        const userEmail = await User.findOne({email: req.body.email});
+        const userEmail = await User.findOne({email: req.body.email.toString()});
 
         if(userUsername)
           return res.status(400).json({error : "Username already in use"})

users/userservice/user-service.test.js

@@ -41,7 +41,7 @@ describe('User Service', () => {
   const newUser = {
     email: '[email protected]',
     username: 'testuser',
-    password: 'testpassword'
+    password: 'test'
   };
 
   const response = await request(app).post('/adduser').send(newUser);
@@ -53,7 +53,7 @@ describe('User Service', () => {
     const newUser = {
       email: '[email protected]',
       username: 'testuser2',
-      password: 'testpassword'
+      password: 'password'
     };
 
     const response = await request(app).post('/adduser').send(newUser);