Skip to content
Snippets Groups Projects
user avatar
Andrey Saranchin authored
If we raise different errors in case of entering an invalid password and
entering the login of a non-existent user during authorization, it will
open the door for an unauthorized person to enumerate users.
So let's unify raised errors in the cases described above.

Closes #tarantool/security#16

NO_DOC=security fix

(cherry picked from commit 5c62f01b)
e8705a65
History
Name Last commit Last update