1. Hello team, recently I found that I'm able to create dual admin via the same username, by creating a dual admin account we maybe not be able login the newly created admin user-named account.
2. For example, the default username and password of nakama dashboard will be admin & password
3. After login into default admin account, we have created another admin account using the following credentials:

username: admin
email: admin@nakama.com
password: Passwd@123
role: administrator

account creation POC 1

account creation poc 2

4. Now when we tries to login with newly created account via username & password, we are not able to login the creds, the server is trowing error like: Invalid credentials.
5. To login with the newly created account, we need to use Email & passoword combo instead of username and password, the username &password combo will not work.

POC Screenrecord video:

https://drive.google.com/file/d/1y401_ppeIzh7RBm2ZRGhgNxD-UwBrYk9/view?usp=sharing

Impact

1. business logic
2. The newly created admin username account can't login with username and password