{"action":"created","issue":{"url":"https://api.github.com/repos/diaspora/diaspora/issues/3540","labels_url":"https://api.github.com/repos/diaspora/diaspora/issues/3540/labels{/name}","comments_url":"https://api.github.com/repos/diaspora/diaspora/issues/3540/comments","events_url":"https://api.github.com/repos/diaspora/diaspora/issues/3540/events","html_url":"https://github.com/diaspora/diaspora/issues/3540","id":6628467,"number":3540,"title":"The login page should display a better message when the username isn't found.","user":{"login":"Flaburgan","id":930064,"avatar_url":"https://avatars.githubusercontent.com/u/930064?v=3","gravatar_id":"","url":"https://api.github.com/users/Flaburgan","html_url":"https://github.com/Flaburgan","followers_url":"https://api.github.com/users/Flaburgan/followers","following_url":"https://api.github.com/users/Flaburgan/following{/other_user}","gists_url":"https://api.github.com/users/Flaburgan/gists{/gist_id}","starred_url":"https://api.github.com/users/Flaburgan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Flaburgan/subscriptions","organizations_url":"https://api.github.com/users/Flaburgan/orgs","repos_url":"https://api.github.com/users/Flaburgan/repos","events_url":"https://api.github.com/users/Flaburgan/events{/privacy}","received_events_url":"https://api.github.com/users/Flaburgan/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/diaspora/diaspora/labels/feature","name":"feature","color":"02e10c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2012-09-04T08:06:28Z","updated_at":"2015-02-12T14:51:39Z","closed_at":null,"body":"A lot of my friends have problems with understand multiple sites for one service. They are on diasp.org, but when they want to go to diaspora, they just enter \"Diaspora\" on Google, and the first answer is of course joindiaspora. So they don't log in successfully.\r\n\r\nWhen a login failed because the username is unknown, the pod should do a search of the username on the other pods. If it found something, it should display a message like “Username unknown on this server but found on pod2 (link to the pod). Did you choose the wrong pod ?\"  This kind of message will help a lot of new users, I'm sure.\r\n\r\nEdit : I talk about it with Raven/Florian, he thinks that indicate the home pod of a user could be a privacy leak, what do you think ?\r\n\r\nAnother solution could be if the username isn't found on the pod, we make a search to the other pods. If we don't find him, we just say \"this username is unknown\", if we find him, we display a message like \"username unknown here, are you sure you are trying to sign into your home pod?\"\r\n\r\n<bountysource-plugin>\r\n\r\n---\r\nWant to back this issue? **[Place a bounty on it!](https://www.bountysource.com/issues/280-the-login-page-should-display-a-better-message-when-the-username-isn-t-found?utm_campaign=plugin&utm_content=tracker%2F522&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F522&utm_medium=issues&utm_source=github).\r\n</bountysource-plugin>"},"comment":{"url":"https://api.github.com/repos/diaspora/diaspora/issues/comments/74082726","html_url":"https://github.com/diaspora/diaspora/issues/3540#issuecomment-74082726","issue_url":"https://api.github.com/repos/diaspora/diaspora/issues/3540","id":74082726,"user":{"login":"Flaburgan","id":930064,"avatar_url":"https://avatars.githubusercontent.com/u/930064?v=3","gravatar_id":"","url":"https://api.github.com/users/Flaburgan","html_url":"https://github.com/Flaburgan","followers_url":"https://api.github.com/users/Flaburgan/followers","following_url":"https://api.github.com/users/Flaburgan/following{/other_user}","gists_url":"https://api.github.com/users/Flaburgan/gists{/gist_id}","starred_url":"https://api.github.com/users/Flaburgan/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Flaburgan/subscriptions","organizations_url":"https://api.github.com/users/Flaburgan/orgs","repos_url":"https://api.github.com/users/Flaburgan/repos","events_url":"https://api.github.com/users/Flaburgan/events{/privacy}","received_events_url":"https://api.github.com/users/Flaburgan/received_events","type":"User","site_admin":false},"created_at":"2015-02-12T14:51:39Z","updated_at":"2015-02-12T14:51:39Z","body":"A next step could be to search in the database if a user with this username is known on another pod.\r\nFor example, if I try to log in with fla on joindiaspora.com, the pod will see that no user with this username is registered here but that there is a user with the id fla@diaspora-fr.org. The pod could then display a message proposing to redirect the user to https://diaspora-fr.org/users/sign_in?user[username]=fla\r\n\r\nThis could be kind of a privacy leak though, anybody can find where a user is registered that way. It is already possible by bruteforcing hitting every possible url on diaspora-fr.org/u/xxxx but it's harder. I personally think that to facilitate the user connection is more important than this privacy leak (no private data is accessible)."}}