Open slifty opened 6 years ago
We should probably not be exposing java object namespaces in our user errors. Instead, just say "Invalid username and/or password" and leave out the rest.
I think this is an aspect of #851 ; it is a message that is useful to have when debugging and dangerous to have in production.
We should probably not be exposing java object namespaces in our user errors. Instead, just say "Invalid username and/or password" and leave out the rest.