Livio Spring d00a47c6f8 fix(login): remove normalization to prevent username enumeration ...

# Which Problems Are Solved

The username entered by the user was resp. replaced by the stored user's username. This provided a possibility to enumerate usernames as unknown usernames were not normalized.

# How the Problems Are Solved

- Store and display the username as entered by the user.
- Removed the part where the loginname was always set to the user's loginname when retrieving the `nextSteps`

# Additional Changes

None

# Additional Context

None

(cherry picked from commit 14de8ecac2)

2025-03-31 12:51:59 +02:00

..

auth_request_test.go

fix(login): allow fallback to local auth in case of IdP errors (#9178)

2025-01-15 10:39:28 +00:00

auth_request.go

fix(login): remove normalization to prevent username enumeration

2025-03-31 12:51:59 +02:00

org.go

feat(eventstore): increase parallel write capabilities (#5940)

2023-10-19 12:19:10 +02:00

refresh_token.go

fix: reduce eventual consistency (#7075)

2023-12-14 11:07:47 +01:00

token.go

chore(oidc): add additional spans to userinfo code paths (#7749)

2024-04-10 17:05:13 +02:00

user_session.go

feat(oidc): end session by id_token_hint and without cookie (#8542)

2024-09-04 10:14:50 +00:00

user.go

feat(OIDC): add back channel logout (#8837)

2024-10-31 15:57:17 +01:00