feat: Add an option to have more verbose error messages and set the default value to false

[Nounoursdestavernes]

Hi,

This PR add a new option that can be config through the ENABLE_VERBOSE_ON_LOGIN env var. (This name can be change, not the best one I concede).

Default value is false. The error message when failling to login is Invalid Credentials.

Setting to true will enable verbose.
Error messages become Invalid email or username or Invalid password (Current behaviour).

This setting must be set to true only if rate limiter is enable. Otherwise this could lead to a security issue. (cf owasp )

Best regards,

[meltyshev]

Thanks again! I've changed the name of the variable a bit, hope you don't mind :)

[Nounoursdestavernes]

No problem, yours is better ! And sorry for the quality of the code (and thx for improving it)

[meltyshev]

No problem, yours is better ! And sorry for the quality of the code (and thx for improving it)

You don't have to apologize! The quality is great. I basically swapped the lines of code to ensure the order is consistent everywhere.