Re:“Invalid Username or Password”: a useless security measure
by d8c6c050cb0a4d7 on Wednesday November 23, 2022 @09:24AM
(#33719455)
This is useful when you have multiple methods to authenticate.
Maybe this user should be redirected to an oauth2 identity provider or maybe they should enter a password.
Good implementations of this will have a hidden password field for password managers to fill along with the username. You'll still need to press enter twice though.
Maybe this user should be redirected to an oauth2 identity provider or maybe they should enter a password.
Good implementations of this will have a hidden password field for password managers to fill along with the username. You'll still need to press enter twice though.