> There might be a better pattern for this, such as making the determination through a xhr request when the username field loses focus.

This is what Microsoft does when logging into their various online sites. And it is not better. There’s not much worse than hitting tab and starting to type a password only to get redirected.