We will be deploying a breaking change with a new Bubble Version shortly. Currently, we display two messages for login failures. One if the email does not exist and another if the password is incorrect. In the new Bubble version, we will follow the industry best practice of only showing one error code and message when either the wrong email or password is used. In the interest of security, we highly recommend updating to this version at your earliest convenience.
Note: This breaking change will affect the usage of Current Workflow Error’s message in workflows that rely on the old status codes of NO_SUCH_USER and WRONG_PASSWORD. The new Bubble version will only return a single INVALID_LOGIN_CREDENTIALS code and message when login has failed.
We’ve included an additional small, but important security fix in this new Bubble Version. If a user tries to reset the password of an email that does not exist, Bubble will simply not send an email rather than alerting the user that the email address does not exist.
Let us know if you have any questions. Happy Bubbling!