Your Login Endpoint Is Leaking Information
Context Most of the time, when you are designing and writing backend services, you don't think about what security details you might be leaking. You are focused on performance and correctness of the logic. That's a good thing, but sometimes even simple logic can hide sneaky bugs or information leaks. We will write an HTTP handler that performs a classic login request with email and…