spotify/crtauth-java — pull request #19 by noaresare (2014-11-02 19:32:21+00:00)
Title: Remove information leak about whether a user exists on the system

Now createChallenge will always return a challenge. If there is no key
a dummy Fingerprint is created based on the server secret and username.