Banking Secure Coding L3: Remove Username Enumeration from Login
<p>Make authentication failure responses uniform while preserving password verification and valid customer access.</p><p>Practice on the fictional <strong>Meridian Bank</strong> website inside your enrolled BartMan project. Lesson two contains a complete workspace with Browser & DevTools, HTTP inspector, API client, a code correction editor, the relevant security tools and evidence checks. Observe the vulnerable state, complete the correction or review, and retest the same cases. All accounts and transactions are fictional.</p><p>Four detailed lessons preserve the manual's learning outcomes, guided demonstration, participant procedure, code examples, expected results and model-answer debrief. Required project time: 75 minutes. Optional extensions are separate. The practice bank is delivered in a protected lesson and requires enrolment in this project.</p>
Tools: Python, Authentication, HTTP response comparison, Password verification, Browser & DevTools, HTTP inspector, API client, Meridian Bank