Core messages are misleading

Created on 9 July 2025, 3 days ago

Problem/Motivation

A number of users have found it confusing when the core error messages are shown. The core status messages display an error message: "1 error has been found: Email address". This is confusing as the users think they've entered an incorrect Email Address, when it's actually their Password which is incorrect. To prevent enumeration, the standard message should not disclose if an email address exists or not. The message might be different in different use cases.

Overriding the core messages is not possible in the site's default Theme, as this needs a hook in the Gin theme, Gin Login or custom module.

Steps to reproduce

Install Gin Login, enter an invalid password for a known user account, see the message relating to email error.

Proposed resolution

Add configuration options to the Gin Login configuration page, allowing administrators to set a custom login error message, with the added option of disabling the core errors on the login page.

Remaining tasks

Submit pull request.

User interface changes

New options on Gin Login configuration screen:-

- Custom error message (Free text)
- Supress core error messages (Tick box)

API changes

None.

Data model changes

configurations scheme change, adding the two fields above.

Feature request
Status

Active

Version

2.1

Component

Code

Created by

🇬🇧United Kingdom entropea

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

  • Issue created by @entropea
  • 🇨🇭Switzerland saschaeggi Zurich

    We're not planning to add any custom Message handing to this module, so I'll have to close out this feature request. The best solution might be to either create a custom module (or new contrib module) to handle the customized messages or an issue in Core to improve the messages itself Core provides.

    Best wishes

  • Pipeline finished with Failed
    3 days ago
    Total: 202s
    #542982
  • Pipeline finished with Failed
    3 days ago
    Total: 144s
    #542986
  • 🇬🇧United Kingdom entropea

    The merge request has been submitted, but if this isn't able to be merged, please confirm and I will create a custom module.

  • 🇨🇭Switzerland saschaeggi Zurich

    Please consider creating a new contrib module, thank you for being proactive

Production build 0.71.5 2024