[Bug] Unregistered email allowed to proceed in authentication flow

[joshnajojo12]

Description

While testing the authentication flow, the system allows an email address that is not registered in the system to proceed instead of showing an appropriate validation message.

When a random email address that does not exist in the database is entered during login or authentication, the system does not stop the process with a "User does not exist" message.

This suggests that the backend may not be validating whether the user exists before allowing the authentication flow to continue.

Goals

• Ensure the system verifies whether an email exists in the database before allowing authentication.
• Prevent authentication flow from proceeding with unregistered email addresses.
• Improve backend validation for login/authentication.

Expected Outcome

If a user enters an email address that is not registered in the system, the application should display an error message such as:

"User does not exist"

The authentication flow should stop and not proceed further.

Acceptance Criteria

• System validates whether the entered email exists in the database.
• Unregistered email addresses are rejected.
• Proper error message is displayed to the user.
• Authentication process does not proceed with invalid users.

Additional Information

Device: Laptop
Operating System: Windows 11
Browser: Firefox

Screenshot attached showing the behavior.