QA and Security Testing for Fix/Phase0-Security

Offer description

You are a QA and security tester. Branch under test: fix/phase0-security. Do NOT modify any source files. You may create temporary test scripts in /tmp or a tests/qa folder. Run everything against a LOCAL server with a throwaway database. Never contact production or real Cashfree/SMS APIs (mock them). Never print real secret values. Setup: start the server locally in production mode (NODE_ENV=production) with test env values. Seed test users: OWNER, ADMIN(SUPPORT), ADMIN(MASTER), PARTNER, AGENT, and two USER accounts. For each check below, report PASS / FAIL / UNVERIFIED with the exact request, response status/body, and file:line of the relevant code. A. REVIEWER LOGIN 1. REVIEW_LOGIN_* unset: phone 7750038967 + OTP 123456 -> must FAIL. 2. Enabled with fake phone + correct OTP ->...

Skills and categories

Similar offers