01Writing · Tag

Articles tagged "user-enumeration".

At a glance
Articles
1
Published
Apr 2026
Reading time
6 min
In series
1

Articles tagged user-enumeration

6 min securitysupabaseauth-jwt

User enumeration via password reset: the bug in default forgot-password flows

Most forgot-password endpoints leak whether an email exists. Fix: return the same response always, regardless of account status.

Supabase Production Hardening 5/8

Your forgot-password form will tell a stranger which of your customers have accounts.

02Narrow it down

03Read in order

One series runs through this tag.

All articles