Update verifyCredentials

auth0-blog / hapi-jwt-authentication

MIT License

42 stars 14 forks source link

Closed anhldbk closed 7 years ago

anhldbk commented 7 years ago

Refactored code to make it cleaner.
If the password is incorrect, we should return the same messages of Incorrect username or email! to prevent bruteforce attacks.

chenkie commented 7 years ago

Thanks!