[BUG] Fixed mass_assignment vuln

[timothycarambat]

Pull Request Type

• ✨ feat
• 🐛 fix
• ♻️ refactor
• 💄 style
• 🔨 chore
• 📝 docs

What is in this change?

Path to invitation logic on backend permissions

[review-agent-prime]

server/endpoints/invite.js

Instead of using console.error for logging errors, consider using a dedicated logging library like Winston or Bunyan. These libraries provide more control over log levels, formats, and destinations. They also handle JSON objects well, which can be useful when logging errors or other data structures.
Create Issue
See the diff
Checkout the fix

    const logger = require('winston');
    //...
    } catch (e) {
      logger.error(e);
      response.sendStatus(500).end();
    }

git fetch origin && git checkout -b ReviewBot/Impro-c83tsc5 origin/ReviewBot/Impro-c83tsc5

Consider using HTTP status code constants instead of hardcoding the status codes. This will make the code more readable and maintainable. You can use the 'http-status-codes' npm package for this purpose.
Create Issue
See the diff
Checkout the fix

    const HttpStatus = require('http-status-codes');
    //...
    response.status(HttpStatus.OK).json({ success: true, error: null });
    //...
    response.sendStatus(HttpStatus.INTERNAL_SERVER_ERROR).end();

git fetch origin && git checkout -b ReviewBot/Impro-lcry3ou origin/ReviewBot/Impro-lcry3ou

Consider validating the username and password before creating the user. This can help prevent SQL Injection attacks and ensure that the data is in the correct format before it is inserted into the database. You can use a library like 'joi' for input validation.
Create Issue
See the diff
Checkout the fix

    const Joi = require('joi');
    //...
    const schema = Joi.object({
      username: Joi.string().alphanum().min(3).max(30).required(),
      password: Joi.string().pattern(new RegExp('^[a-zA-Z0-9]{3,30}$')).required(),
    });
    const { error } = schema.validate({ username, password });
    if (error) {
      response.status(400).json({ success: false, error: error.details[0].message });
      return;
    }

git fetch origin && git checkout -b ReviewBot/Impro-19pyzlf origin/ReviewBot/Impro-19pyzlf