> That's a security failing - you shouldn't let the website user know that a given account exists. It's not an issue if you let users pick their own username.

> That's a security failing - you shouldn't let the website user know that a given account exists. It's not an issue if you let users pick their own username. There's simply no way to get around this (apart from assigning usernames). In other cases, usernames being publicly available is a desired feature. [0] https://imgur.com/a/qCupYyQ https://imgur.com/a/qCupYyQ