What happens: The system displays raw usernames everywhere, even when a user has set a display name. When the username is an email address (common with SSO-provisioned accounts), the full email is visible throughout the platform.
Expected:
- If a user has set a first/last name, show that name instead of the username in all public-facing contexts (threads, posts, profiles, mentions, notifications).
- If the username is an email address, strip the @domain portion for display purposes.
- The raw username should only appear in admin contexts and the user's own account settings.
Impact: User email addresses are disclosed publicly, which is a privacy concern. Display names are ignored even when users have set them.
Patrick Bass
@mobieus