Skip to content

bug: Subscription Expiration Bypass #1913

Description

@VatsalCodes44

Describe the bug
Users can access purchased courses even after the validity period has expired.

To Reproduce
Steps to reproduce the behavior:

  1. Purchase a course more than 3 years ago (or set assignedAt to an old date in DB)
  2. Access the course via web or API
  3. Course is still accessible

Expected behavior
Courses should not be accessed after the expire period (3 years by default from the purchase date).

Screenshots or GIFs
N/A

Info (please complete the following information):

  • Browser: Any
  • Version: N/A

Additional context
Root cause was a missing assignedAt date check in course access queries.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions