IdP 4.0.1 does not display errors when username/password is blank

Max Spicer max.spicer at york.ac.uk
Fri Mar 5 15:33:22 UTC 2021


I've noticed that our IdP 4.0.1 install doesn't display errors if I click
the the "Log in" button without entering a username or password. Instead,
the form just redisplays. The 3.4.8 IdP displays the bad-username.message
or bad-password.message as appropriate in this situation.

Can anyone confirm if this is a change in 4, or should I be looking for
something in our setup that has caused this change? I've already switched
to the default login.vm and login-error.vm views and confirmed this doesn't
alter the behaviour.

I appreciate we should probably have validation in the form to make these
values required anyway.

Thanks,

Max Spicer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20210305/59259961/attachment.htm>


More information about the users mailing list