Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Force users to login via email address instead of username #89

Open
Genyus opened this issue Jul 30, 2020 · 0 comments
Open

Force users to login via email address instead of username #89

Genyus opened this issue Jul 30, 2020 · 0 comments
Labels
security Security enhancements

Comments

@Genyus
Copy link
Member

Genyus commented Jul 30, 2020

Summary

As a user, I want to login with my email address so that I can be better protected against malicious login attempts

Acceptance Criteria

Scenario: User supplies correct email address and password

Given that I am on the sign-in page
When I enter my email address and password correctly
And click ‘Sign In’
Then I am taken to the dashboard

Scenario: User supplies invalid email address

Given that I am on the sign-in page
When I enter a malformed email address
and click ‘Sign In’
Then I see an error message ‘Sorry, that doesn't appear to be a valid email address.”

Scenario: User supplies incorrect email address or password

Given that I am on the sign-in page
When I enter my email address or password incorrectly
and click ‘Sign In’
Then I see an error message ‘Sorry, either the email address or password you entered is incorrect.”

Additional context

See custom code example

@Genyus Genyus added the security Security enhancements label Jun 13, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Security enhancements
Projects
None yet
Development

No branches or pull requests

1 participant