One Time Token Error Message

[danvega]

I'm trying to test out One Time Token Authentication and I came across an issue. If I tried to login with a user that was not in the system I would get taken back to the login screen and the username would be displayed as an error above both the form login and ott login.

If I logged in with a user that was available in Spring Security everything worked as expected.

[rwinch]

Thanks for this report @danvega! The error message should still be a generic failed to authenticate error message so we don't leak any information about the users that exist or don't. However, I agree that this should not be displaying the username as the error message.