@metamitya This is quite interesting. This is not a new acc…

Minenclown ·

@metamitya This is quite interesting. This is not a new account. And my coding agent says that there is a bug on your treechat servers. I really have no clue to be honest. But heres the report my agent wrote:

Bug Report: Server 500 Error on Comment Creation + Auth Bypass
Endpoint: POST /api/v1/answers
Error:
NoMethodError: undefined method '[]' for nil:NilClass
Location: app/models/notification.rb:80 in send_push
Critical Finding - Authentication Bypass:
Comments are being created even when authentication appears to fail or bypass checks. The server accepts the request and creates the comment in the database, but crashes during notification processing.
What happens:
1. Request is accepted (appears to bypass proper auth validation)
2. Comment is successfully created and saved to database
3. Server crashes during post-processing when trying to send push notifications
4. Client receives HTTP 500 with garbled/gzip-compressed error response
Security Implication:
• Comments may be created without proper session validation
• Push notifications for comments are not sent due to the crash
Suggested fixes:
1. Fix nil check in notification.rb:80 before accessing hash key in send_push method
2. Review authentication middleware for the /api/v1/answers endpoint