-
Notifications
You must be signed in to change notification settings - Fork 10.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix!: api login should not suggest which credential is wrong #32086
Conversation
🦋 Changeset detectedLatest commit: a236e2a The changes in this PR will be included in the next version bump. This PR includes changesets to release 32 packages
Not sure what this means? Click here to learn what changesets are. Click here if you're a maintainer who wants to add another changeset to this PR |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## develop #32086 +/- ##
===========================================
- Coverage 54.77% 54.73% -0.05%
===========================================
Files 2298 2296 -2
Lines 50708 50704 -4
Branches 10374 10373 -1
===========================================
- Hits 27775 27752 -23
- Misses 20440 20463 +23
+ Partials 2493 2489 -4
Flags with carried forward coverage won't be shown. Click here to find out more. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You think that change from Incorrect pass
to Unauthorized
could be viewed as a breaking change?
it could be and we could discuss hours about. there is no way to fix it without changing the payload, so there is no other way to patch. so far its planned to be released only at 7.0 (already a major). so the discussion if its or not a break is a bit subjective. until now, being released only on 7.0 its a break. if someone decides to patch this, restoring the old behavior, so its a regular patch, at least the changeset will not complain about it It is worth mentioning that this was once the default behavior, and unintentionally changed. look the original file comment
|
* develop: (71 commits) fix: search room not reactive after room name changes (#32123) test: fix `should edit name of targetChannel` flaky test (#32121) fix: UI allowing to mark room as favorite despite room was not a `default` room (#32063) chore: Remove duplicated `ChannelDeletionTable` (#32114) test(livechat): fix Department flaky test (#32102) test(livechat): File upload settings (#32060) test: contact center after hook calling wrong endpoint (#32094) fix(livechat): registering guest multiple times cause message loss (#32069) test: allow csp for livechat tests (#32116) chore: Move portals to the portals folder (#32090) test: `InitialData.insertAdminUserFromEnv` (#32066) fix: `CSP` error right after `setInlineScriptsAllowed` (#32108) chore: Create/Edit room consistency (#31960) chore: Remove references to EE code from the app events (#31926) test(Livechat): Clean up after registerGuest() test (#32092) test: make presence api tests fully independent (#31782) test: make roles fully independent (#31783) chore: bump version to 7.0.0-develop test: make login api tests fully independent (#31786) fix!: api login should not suggest which credential is wrong (#32086) ...
Proposed changes (including videos or screenshots)
Apparently at some point the
_runLoginHandlers
function became asynchronous, thwarting our efforts to obfuscate what the reason for the login rejection was.Instead of returning
Incorrect Password
its going to returnUnauthorized
as expectedIssue(s)
Steps to test or reproduce
Further comments