{"action":"created","issue":{"url":"https://api.github.com/repos/NodeBB/NodeBB/issues/7111","repository_url":"https://api.github.com/repos/NodeBB/NodeBB","labels_url":"https://api.github.com/repos/NodeBB/NodeBB/issues/7111/labels{/name}","comments_url":"https://api.github.com/repos/NodeBB/NodeBB/issues/7111/comments","events_url":"https://api.github.com/repos/NodeBB/NodeBB/issues/7111/events","html_url":"https://github.com/NodeBB/NodeBB/issues/7111","id":391266142,"node_id":"MDU6SXNzdWUzOTEyNjYxNDI=","number":7111,"title":"Feature: add error message for forgot password if email does not exist","user":{"login":"djensen47","id":527865,"node_id":"MDQ6VXNlcjUyNzg2NQ==","avatar_url":"https://avatars2.githubusercontent.com/u/527865?v=4","gravatar_id":"","url":"https://api.github.com/users/djensen47","html_url":"https://github.com/djensen47","followers_url":"https://api.github.com/users/djensen47/followers","following_url":"https://api.github.com/users/djensen47/following{/other_user}","gists_url":"https://api.github.com/users/djensen47/gists{/gist_id}","starred_url":"https://api.github.com/users/djensen47/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/djensen47/subscriptions","organizations_url":"https://api.github.com/users/djensen47/orgs","repos_url":"https://api.github.com/users/djensen47/repos","events_url":"https://api.github.com/users/djensen47/events{/privacy}","received_events_url":"https://api.github.com/users/djensen47/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-12-14T20:20:51Z","updated_at":"2018-12-15T01:16:17Z","closed_at":null,"author_association":"NONE","body":"Currently when somebody enters a password that does not exist in the system, there is no error message.\r\n\r\nI would like an option in the admin panel to enable/disable showing an error in this situation. By default it would be off. When it's on, maybe it should show a security question to help prevent bot probing.\r\n\r\nI realize it might be considered a security risk but since I have people that joined the forums from 2001, they may not remember what email the used to sign up. I'd prefer the usability of an error message over them not knowing."},"comment":{"url":"https://api.github.com/repos/NodeBB/NodeBB/issues/comments/447523948","html_url":"https://github.com/NodeBB/NodeBB/issues/7111#issuecomment-447523948","issue_url":"https://api.github.com/repos/NodeBB/NodeBB/issues/7111","id":447523948,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NzUyMzk0OA==","user":{"login":"djensen47","id":527865,"node_id":"MDQ6VXNlcjUyNzg2NQ==","avatar_url":"https://avatars2.githubusercontent.com/u/527865?v=4","gravatar_id":"","url":"https://api.github.com/users/djensen47","html_url":"https://github.com/djensen47","followers_url":"https://api.github.com/users/djensen47/followers","following_url":"https://api.github.com/users/djensen47/following{/other_user}","gists_url":"https://api.github.com/users/djensen47/gists{/gist_id}","starred_url":"https://api.github.com/users/djensen47/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/djensen47/subscriptions","organizations_url":"https://api.github.com/users/djensen47/orgs","repos_url":"https://api.github.com/users/djensen47/repos","events_url":"https://api.github.com/users/djensen47/events{/privacy}","received_events_url":"https://api.github.com/users/djensen47/received_events","type":"User","site_admin":false},"created_at":"2018-12-15T01:16:17Z","updated_at":"2018-12-15T01:16:17Z","author_association":"NONE","body":"Another thing that would be _super_ helpful is listing the failed email attempt in the \"Events\" log. Then I could go through on a weekly basis and send out message.s. Or if a bunch of different attempts are coming from the same IP, I can ban that IP."}}
{"actor":{"display_login":"djensen47"}}