[keycloak-dev] username guessing

Bill Burke bburke at redhat.com
Wed Oct 28 15:50:16 EDT 2015


How is this possible?

On 10/28/2015 10:53 AM, Michael Gerber wrote:
> Hi all,
>
> it is possible to guess the username of disabled users.
> This was not possible in earlier versions of keycloak. Is this on purpose?
>
> Best
> Michael
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>

-- 
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com


More information about the keycloak-dev mailing list