[Breaking Change] Login Failure Messages

[austin3]

Monthly Community Update -- June 2021

@josh Not a fan of this (the signup/login part). It may be the industry “Best Practice”, but it’s fundamentally flawed, as has been pointed out by many people online. It relies on the idea that you shouldn’t expose whether an email address exists for an account already, aka email leakage. Except that if I want to find out if an account already exists, I can simply just try to create an account with that email address. If the creation is successful, then I know the account doesn’t exist. If it …