Log in with unverified account

make-sans / developool

An ExpressJS API server consumed by a ReactJS client, which combined create the Developool service

http://developool.com

MIT License

2 stars 0 forks source link

Log in with unverified account #3

Closed ignaczalexander closed 5 years ago

ignaczalexander commented 5 years ago

When I try to log in with an unverified account it checks if its verified before it checks for password so no matter if my password is incorrect, I know if the account is verified or not, which is not a huge security risk, but still.

Federlizer commented 5 years ago

Issue has been fixed