Skip to the editor

Prove the login really checks the password

Forms & validation · level 1 of 5 · Nimbus

A test that only checks the happy path cannot tell a working login from one that lets anybody in.

The problem

Write tests for the Nimbus login page (demo@nimbus.app / secure123).

Your suite must prove both of these:

  1. Valid credentials sign the user in.
  2. A wrong password is rejected and shows the error message.

The second one is the point. A suite that only tests the happy path passes just as well against a login that accepts any password, and that is a security bug shipping to production.

Done when

  • Valid credentials open the dashboard.
  • A wrong password keeps the user out and shows a clear error.

Bugs we plant

  • Login accepts any password
  • Wrong credentials show no error message

We break each one in a copy of the app. Your test has to fail on every copy.

Loading the editor…