Solving issue: https://linear.app/comm/issue/ENG-2047/[web]-[native][keyserver][security]-on-login-wrong-user-and-wrong
Keyserver returns only `"invalid_parameters"` instead of either `"invalid_parameters"` or `"invalid_credentials"`. So it is impossible to say which of the fields was wrong based on the error.
As Tomek mentioned it is still possible to perform timing attack but it will be taken care of in another issue on Linear. On web and native we are reacting to `"invalid_parameters"` displaying message about incorrect credentials, not specifying which one was incorrect.