nextcloud / nextcloud/user_saml
wrong password at direct login badly communicated
Open
Nobody has claimed this yet.
0. Needs triage
bug
- Dominant language
- PHP
- Stars
- 104
- Forks
- 85
- Avg merge
- 1d 15h
- Merged PRs (30d)
- 16
Description
When I enter my credentials wrongfully on the "Direct Login" page, it's hard to retrieve the information about that.
Steps to reproduce
- Open the login page > I see a bunch of IDPs for selection and a button Direct log in
- Hit Direct log in > I get directed to Nextcloud's normal username/password page
- Enter username/password and make a mistake in one of them
Expected behaviour
- I get noticed Wrong username or password
Actual behaviour
- I get back to the initial IDP selection page
- After hitting Direct log in I get to the correct page and finally see what I expected in the first place: Wrong username or password
Server configuration
- NC 18.0.2
- user_saml 3.0.1
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the failed-credentials flow from the Direct Login page using the reported Nextcloud 18.0.2 and user_saml 3.0.1 versions. Trace the transition from the username/password page back to IDP selection and compare it with the second Direct Login attempt. Done means the first failed login directly shows “Wrong username or password” without returning to the IDP selection page.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100