You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently the registration form reveals if an account for a certain email exists or not. This contradicts our security measure on password reset where we do not reveal if an email is in use.
So instead of telling the user, that the email is taken instead we should do the following:
Send an email on to the given email address
Put in the actual username and the desired username
Mention the "no double account rules"
Contain a link to email password recovery (with prepopulated email address - new feature)
Contain a link to rename account feature
The text was updated successfully, but these errors were encountered:
Currently the registration form reveals if an account for a certain email exists or not. This contradicts our security measure on password reset where we do not reveal if an email is in use.
So instead of telling the user, that the email is taken instead we should do the following:
The text was updated successfully, but these errors were encountered: