WealthLedger/frontend
5
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects Releases Wiki Activity

[Bug] Блокировать auth Link во время pending submit #56

New Issue
Closed
opened 2026-10-11 21:48:56 +03:00 by codex-bot · 0 comments
codex-bot commented 2026-10-11 21:48:56 +03:00
Owner
Copy Link
Copy Source

Problem

Fieldset disabled блокирует controls, но Button component=Link остаётся anchor. Во время submit можно перейти login/register, потеряв draft/error context. Identity leak этим не доказана.

Expected Behavior

Pointer/keyboard не переключают auth route пока submit pending; после failure ввод и обычная ссылка доступны.

Evidence

Audit date 2026-10-11; 05, FE-005. Revision c8821200ce699dab1ce65360d1968d5877a2e78b; Confidence High; Verification status static.
Affected: AuthForm.tsx:26–84; LoginForm/RegisterForm:6–9; auth.vm.ts:121–133.

Scope

In scope

Existing AuthForm interaction guard и accessible disabled semantics/tab behavior.

Out of scope

Global navigation/back lock, session queue redesign, div navigation, raw password changes.

Proposed Approach

Pending guard click/activation у owner, aria/data disabled и tab exclusion; сохранить true Link в обычном состоянии.

Acceptance Criteria

  • Deferred submit: pointer click/Enter не меняют auth route.
  • Pending link не focusable обычным Tab; недоступность обозначена семантически.
  • Failed submit сохраняет ввод, link восстановлена; auth generation/cookie ordering прежние.

Verification

Existing AuthForm RTL/MemoryRouter с deferred rejection и narrow browser keyboard check; frontend final verify по behavior diff.

Dependencies

Нет.

Traceability

Campaign WealthLedger/main#23 . Finding FE-005. WealthLedger/frontend; T24.

<!-- wealthledger-audit:2026-10-11:auth-pending-navigation --> ## Problem Fieldset disabled блокирует controls, но Button component=Link остаётся anchor. Во время submit можно перейти login/register, потеряв draft/error context. Identity leak этим не доказана. ## Expected Behavior Pointer/keyboard не переключают auth route пока submit pending; после failure ввод и обычная ссылка доступны. ## Evidence Audit date `2026-10-11`; [05](https://git.personal.ksv741.ru/WealthLedger/main/src/commit/d07fbfabb1295780952a554185989d2d5b5c8349/audits/2026-10-11/reports/05-frontend-architecture-report.md), FE-005. Revision `c8821200ce699dab1ce65360d1968d5877a2e78b`; Confidence High; Verification status static. Affected: [AuthForm.tsx:26–84](https://git.personal.ksv741.ru/WealthLedger/frontend/src/commit/c8821200ce699dab1ce65360d1968d5877a2e78b/src/features/auth/ui/AuthForm/AuthForm.tsx#L26-L84); LoginForm/RegisterForm:6–9; auth.vm.ts:121–133. ## Scope ### In scope Existing AuthForm interaction guard и accessible disabled semantics/tab behavior. ### Out of scope Global navigation/back lock, session queue redesign, div navigation, raw password changes. ## Proposed Approach Pending guard click/activation у owner, aria/data disabled и tab exclusion; сохранить true Link в обычном состоянии. ## Acceptance Criteria - [ ] Deferred submit: pointer click/Enter не меняют auth route. - [ ] Pending link не focusable обычным Tab; недоступность обозначена семантически. - [ ] Failed submit сохраняет ввод, link восстановлена; auth generation/cookie ordering прежние. ## Verification Existing AuthForm RTL/MemoryRouter с deferred rejection и narrow browser keyboard check; frontend final verify по behavior diff. ## Dependencies Нет. ## Traceability Campaign https://git.personal.ksv741.ru/WealthLedger/main/issues/23 . Finding FE-005. WealthLedger/frontend; T24.
codex-bot added this to the Technical Audit Remediation — 2026-10-11 milestone 2026-10-11 21:48:56 +03:00
codex-bot added the Kind/Bug
Priority
Medium
3
audit/2026-10-11 labels 2026-10-11 21:48:56 +03:00
codex-bot was assigned by hermes-agent 2026-10-12 00:04:19 +03:00
hermes-agent added this to the WealthLedger — Delivery Board project 2026-10-12 00:04:19 +03:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Kind/Dependencies
Dependency update or dependency-management work
 Kind/Investigation
Research or decision required before implementation
 Kind/Process
Developer workflow, CI/CD, tooling, or process improvement
 Kind/Refactor
Internal code or configuration restructuring without new product behavior
 audit/2026-10-11
Technical Audit Remediation — 2026-10-11
 kind/investigation
Нужна проверка evidence до решения; runtime-дефект не утверждается
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Medium
3
The priority is medium
Priority
Low
4
The priority is low
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
Status
Abandoned
3
Somebody has started to work on this but abandoned work
No labels audit/2026-10-11 Kind/Bug
Priority
Medium
3
Milestone
No items
No Milestone Technical Audit Remediation — 2026-10-11
Projects
Clear projects
No projects
WealthLedger — Delivery Board
Бэклог
Assignees
Clear assignees
codex-bot hermes-agent ksv741 publisher-bot renovate-bot
No Assignees codex-bot
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: WealthLedger/frontend#56