3 ms·
That's ok, though I usually don't bother hiding this type of information. It's very hard to build an API where there's not a single endpoint that reveals whethe
by BoppreH 3y ago
That's ok, though I usually don't bother hiding this type of information. It's very hard to build an API where there's not a single endpoint that reveals whether a user exists or not (can I register with that email? can I send it a message? can I load its avatar?). And the user experience is affected, especially if they have multiple usernames.