[keycloak-dev] username guessing

Stian Thorgersen sthorger at redhat.com
Wed Oct 28 10:55:35 EDT 2015


No, that's a bug

On 28 October 2015 at 07:53, Michael Gerber <gerbermichi at me.com> wrote:

> Hi all,
>
> it is possible to guess the username of disabled users.
> This was not possible in earlier versions of keycloak. Is this on purpose?
>
> Best
> Michael
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/keycloak-dev/attachments/20151028/7dd94e73/attachment.html 


More information about the keycloak-dev mailing list