[Bug] : Teacher Authentication Can Be Bypassed via LocalStorage Manipulation

[Asifmd45]

Description

Authentication relies entirely on client-side localStorage values. A user can manually modify stored session data and gain access as any teacher account.

Steps to Reproduce

1. Open browser developer tools.
2. Navigate to localStorage.
3. Modify the stored teacher session object.
4. Refresh the application.

Expected Behavior

Teacher sessions should be validated before granting access to protected pages.

Actual Behavior

Any user can impersonate a teacher by modifying localStorage values.

Environment

• Browser: Chrome 125
• OS: Windows 11
• Node.js version: 20.x

Affected Page / Component

• Landing
• Login
• Dashboard
• Student Feedback
• Analytics
• Other: Authentication

Additional Context

Current authentication is entirely client-side and does not validate session integrity.

Hey @rishima17 I would like to work on this issue under SSOC-2026..

[Gagan-astatine]

Hi, I'd like to work on this issue as part of SSoC 2026.
Kindly assign this issue to me. Thanks.

[arpita-1111]

Hey @SatyamPandey-07 I want to work on this issue please assign it to me.
I am SSoC'26 contributor

[SatyamPandey-07]

@arpita-1111 do the same message on other issue which are yet to be assigned