Page MenuHomePhabricator
Create Task
Maniphest T184591

Misleading login error messages when cookies are disabled
Closed, ResolvedPublic
Actions

Description

When logging in with a wrong user name or wrong password, Discourse says "Unknown error" when cookies are disabled in your web browser, instead of "Incorrect username, email or password".

Event Timeline

Aklapper triaged this task as Lowest priority.Jan 10 2018, 9:47 AM
Aklapper created this task.
Tgr added a project: Upstream.Feb 4 2018, 9:30 AM
Tgr subscribed.

https://meta.discourse.org/t/unknown-error-when-trying-to-long-with-incorrect-credentials-with-cookies-disabled/79750

• 238482n375 set Security to Software security bug.Jun 15 2018, 8:07 AM
• 238482n375 added a project: acl*security.
• 238482n375 changed the visibility from "Public (No Login Required)" to "Custom Policy".
• 238482n375 subscribed.

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

Ladsgroup removed a project: acl*security.Jun 15 2018, 11:51 AM
Ladsgroup changed the visibility from "Custom Policy" to "Public (No Login Required)".
Ladsgroup removed a subscriber: • 238482n375.
Restricted Application added a project: acl*security. · View Herald TranscriptJun 15 2018, 11:51 AM
Ladsgroup removed a project: acl*security.Jun 15 2018, 11:51 AM
Aklapper closed this task as Resolved.Sep 8 2020, 1:23 PM
Aklapper moved this task from Backlog to Patch merged upstream on the Upstream board.

Fixed upstream in https://github.com/discourse/discourse/pull/6137

Content licensed under Creative Commons Attribution-ShareAlike (CC BY-SA) 4.0 unless otherwise noted; code licensed under GNU General Public License (GPL) 2.0 or later and other open source licenses. By using this site, you agree to the Terms of Use, Privacy Policy, and Code of Conduct. · Wikimedia Foundation · Privacy Policy · Code of Conduct · Terms of Use · Disclaimer · CC-BY-SA · GPL