Livio Spring ffe6d41588

fix(login v1): handle password reset when authenticating with email or phone number (#10228) ...

# Which Problems Are Solved

When authenticating with email or phone number in the login V1, users
were not able to request a password reset and would be given a "User not
found" error.
This was due to a check of the loginname of the auth request, which in
those cases would not match the user's stored loginname.

# How the Problems Are Solved

Switch to a check of the resolved userID in the auth request. (We still
check the user again, since the ID might be a placeholder for an unknown
user and we do not want to disclose any information by omitting a check
and reduce the response time.)

# Additional Changes

None

# Additional Context

- reported through support
- requires backport to v3.x

2025-07-10 09:29:26 +02:00

..

console

fix(OTEL): reduce high cardinality in traces and metrics (#9286)

2025-02-04 09:55:26 +01:00

login

fix(login v1): handle password reset when authenticating with email or phone number (#10228)

2025-07-10 09:29:26 +02:00