Why a login failed, for logs and metrics. Never tell the client which one: it tells an attacker which accounts exist.
Why a login failed, for logs and metrics. Never tell the client which one: it tells an attacker which accounts exist.