troyhunt/password-purgatory-api

A bit of gaslighting

Opened this issue · 0 comments

You know how annoying it is when you can't tell whether an "Enter password" field is for setting up a new password or for checking an existing one? After they've done the easy rounds, let's throw in a bit of confusion:

At random:

"Password incorrect or not registered. If you are trying to set up a new password, please enter 'new password' in the box"

If they type "new password" (exact capitalisation), respond with

"Password incorrect or not registered. If you are trying to set up a new password, please enter 'New Password' in the box"

If they type 'New Password' (exact capitalisation), respond with

"It looks like you are trying to set up a new password. Is that correct?"

If they type "yes" (any capitalisation):

"Thank you. Please enter new password in the box"

On any response, clear the field, reset, and start all over again