​How this Okta security flaw exposed accounts with long usernames

Okta disclosed a vulnerability allowing password bypass for accounts with usernames of 52 characters or more, requiring a cached key from a prior login on the same browser.