Is it possible to stop users receiving a “user_exists” response if they signup with an existing email address.
For example, if I didn’t want users to be able to find out if an email address has previously registered an account. Could I get a generic sign up failed error response?
Reproduced, seems to be an inconsistency between change password and signup responses. Checking with engineering.
Thanks for posting this - I have logged this issue with the relevant engineering team to provide a more generic response from the API. In the meantime, you can customize the message displayed by Lock, as outlined in the following document:
https://auth0.com/docs/libraries/lock/v10/customizing-error-messages