Tools/Notes
1
0
Fork 0
mirror of https://github.com/TriliumNext/Notes.git synced 2025-07-29 19:12:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1708 from TriliumNext/fix_http-code-failed-login_#1707

Browse Source 
fix(login): send back 401 Unauthorized on failed login attempt
This commit is contained in:
Elian Doran 2025-04-15 13:12:28 +03:00 committed by GitHub
commit 0f06bf43f0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/routes/login.ts
View File

@ -133,7 +133,7 @@ function sendLoginError(req: Request, res: Response, errorType: 'password' | 'to
log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`); log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`);
} }
res.render('login', { res.status(401).render('login', {
wrongPassword: errorType === 'password', wrongPassword: errorType === 'password',
wrongTotp: errorType === 'totp', wrongTotp: errorType === 'totp',
totpEnabled: totp.isTotpEnabled(), totpEnabled: totp.isTotpEnabled(),