Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

*: don't error out if a username doesn't exist in the backing connector #658

Merged

Conversation

ericchiang
Copy link
Contributor

@ericchiang ericchiang commented Nov 1, 2016

Instead of throwing a 500 error if a user enters an invalid name,
display the same text box as if the user had entered the wrong
password.

NOTE: An invalid username now returns much quicker than an invalid
password. Consider adding an arbitrary sleep in the future if we
care about masking which was invalid.

cc @rithujohn191 @kans @dghubble

closes #656

Instead of throwing a 500 error if a user enters an invalid name,
display the same text box as if the user had entered the wrong
password.

NOTE: An invalid username now returns much quicker than an invalid
password. Consider adding an arbitrary sleep in the future if we
care about masking which was invalid.
@rithujohn191
Copy link
Contributor

lgmt

@ericchiang ericchiang merged commit 799b3f3 into dexidp:dev Nov 1, 2016
@ericchiang ericchiang deleted the dev-dont-error-on-invalid-username branch November 22, 2016 20:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants