Your Login Endpoint Is Leaking Information

Context Most of the time, when you are designing and writing backend services, you don&#x27;t think about what security details you might be leaking. You are focused on performance and correctness of the logic. That&#x27;s a good thing, but sometimes even simple logic can hide sneaky bugs or information leaks. We will write an HTTP handler that performs a classic login request with email and…