[PATCH] privacy: don't tell users what is the reason for a failed login

Mads Kiilerich mads at kiilerich.com
Mon May 25 16:39:44 EDT 2015


On 05/21/2015 09:41 AM, Andrew Shadura wrote:
> Hello,
>
> On Tue, 19 May 2015 17:15:30 +0200
> Mads Kiilerich <mads at kiilerich.com> wrote:
>
>> I think the current implementation is wrong when it does any kind of
>> login verification in the user friendly form code. The authentication
>> should be done explicitly in the controller. (That would also make
>> the email login simpler.)
> I agree.
>
>> So while this patch makes it less wrong, I still think it is a bit
>> pointless.
> But meanwhile, are you okay with pushing those?

I guess I'm "-0" because it doesn't bring us closer to the right 
solution and it takes some time and energy anyway. 'nough said. Push it 
if you have time and energy ;-)

/Mads



More information about the kallithea-general mailing list