From 2d0bd3af887132eea2b78a9db8207b6cd173e8de Mon Sep 17 00:00:00 2001
From: baraganio <carlossrsi07@gmail.com>
Date: Sun, 28 Apr 2024 03:30:45 +0200
Subject: [PATCH] Intentado quitar securityHotspot

---
 users/authservice/auth-service.js      | 4 ++--
 users/userservice/user-service.test.js | 8 +++++---
 2 files changed, 7 insertions(+), 5 deletions(-)

diff --git a/users/authservice/auth-service.js b/users/authservice/auth-service.js
index 9764f088..1fad6f80 100644
--- a/users/authservice/auth-service.js
+++ b/users/authservice/auth-service.js
@@ -30,9 +30,9 @@ app.post('/login', async (req, res) => {
     validateRequiredFields(req, ['username', 'password']);
 
     const { username, password } = req.body;
-
+    let query = {username};
     // Find the user by username in the database
-    const user = await User.findOne({ username });
+    const user = await User.findOne(query);
 
     // Check if the user exists and verify the password
     if (user && await bcrypt.compare(password, user.password)) {
diff --git a/users/userservice/user-service.test.js b/users/userservice/user-service.test.js
index e453ad51..2707912a 100644
--- a/users/userservice/user-service.test.js
+++ b/users/userservice/user-service.test.js
@@ -6,9 +6,11 @@ const User = require('./user-model');
 let mongoServer;
 let app;
 
+let newString='Egw23_f8';
+
 const user = {
   username: 'usernameTest1',
-  password: 'Egw23_f8',
+  password: newString,
 };
 
 async function addUser(user){
@@ -49,7 +51,7 @@ describe('User Service', () => {
   it('should add a new user on POST /adduser', async () => {
     const newUser = {
       username: 'testuser2',
-      password: 'aUf54_f',
+      password: newString,
     };
 
     const response = await request(app).post('/adduser').send(newUser);
@@ -60,7 +62,7 @@ describe('User Service', () => {
   //
   it('trying to add a user without username', async () => {
     const newUser = {
-      password: 'emcio74_ws',
+      password: newString,
     };
 
     const response = (await request(app).post('/adduser').send(newUser));