I’ve created a username “testuser”, and I’m signing up again, specifically to test that a user cannot occupy the same user name. The error I get is “Something went wrong, please try again later”
I’m using sign in with redirect, via the react hooks.
It’s not clear as to what the error is. But from my admin dashboard > Monitoring > Logs,
we can see the proper errro, “The username provided is in use already”.
The default “Something went wrong, please try again later” is designed to prevent user enumeration attacks.
If a threat actor is aware that a user exists, then they can perform an authentication attack against them, such as brute-force.
However, if you wish to modify this message by going to Branding → Universal Login → Advanced Settings → Signup prompt → auth0-users-validation
You can use something more generic like “Username or email already taken”.
Thank you @ryndm for sharing that post with us regarding the matter! Yes, you can also disable that option to prevent the use of generic messages however I would recommend just changing the text of the generic message instead of disabling that option. Feel free to choose whichever of these options if one is better suited for your use case!
Hope this helps! If you have any other questions, feel free to leave a reply!