Incorporate ideas from OWASP's Authentication Cheat Sheet #15
Description
I think most importantly, authentication errors should be generic. Also, usernames could be made case-insensitive.
{{ message }}
I think most importantly, authentication errors should be generic. Also, usernames could be made case-insensitive.