ls ~/writing --tag=user-enumeration

[01]Writing · Tag

Articles tagged "user-enumeration".

$ tag --stat user-enumeration
Articles
1
Published
Apr 2026
Reading time
6 min
In series
1

Articles tagged user-enumeration

6 min [security][supabase][auth-jwt]

User enumeration via password reset: the bug in default forgot-password flows

Most forgot-password endpoints leak whether an email exists. Fix: return the same response always, regardless of account status.

Supabase Production Hardening 5/8

user-enumeration-password-reset-leak--cover
Your forgot-password form will tell a stranger which of your customers have accounts.

[02]Narrow it down

[03]Read in order

One series runs through this tag.

All articles