Problem:

Fixes #15

The original implementation of the vote function in the smart contract allowed for unauthorised voting by manipulating the _voter parameter.

Solution:

The solution involves ensuring that only authenticated users are allowed to cast votes. This is achieved by implementing an authentication check that verifies the sender's identity before allowing them to vote. The updated vote function now checks if the sender is authenticated before proceeding with the voting process. The authentication was already being done in Authentication.sol, so its instance is created in Election.sol and later a require() statement is used to allow only authenticated users.

Changes Made:

Election.sol:

• Modified the constructor to accept an additional parameter _authContractAddress for the Authentication contract address.
• Instantiated the Authentication contract using the provided address.
• Updated the vote function to include a check for the sender's authentication status using authContract.getAuthStatus(msg.sender) before proceeding with the voting logic.

ElectionFactory.sol:

• Modified the getElectionFromFactory function to accept an additional parameter _authContractAddress for the Authentication contract address.

ElectionOrganizer.sol:

• Updated the createElection function to accept an additional parameter _authContractAddress for the Authentication contract address.