Tools/Notes
1
0
Fork 0
mirror of https://github.com/TriliumNext/Notes.git synced 2025-11-04 15:11:31 +08:00
Code Issues Packages Projects Releases Wiki Activity

wrong password login screen should return 401 so that it counts to the rate limiter, fixes #3867

Browse Source
This commit is contained in:
zadam 2023-04-23 22:22:05 +02:00
parent e24d5a6f83
commit eff567ee48
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
package-lock.json generated
View File

@ -1,12 +1,12 @@
{
"name": "trilium",
"version": "0.59.3",
"version": "0.59.4",
"lockfileVersion": 2,
"requires": true,
"packages": {
"": {
"name": "trilium",
"version": "0.59.3",
"version": "0.59.4",
"hasInstallScript": true,
"license": "AGPL-3.0-only",
"dependencies": {

2
src/routes/login.js
View File

@ -76,7 +76,7 @@ function login(req, res) {
// note that logged IP address is usually meaningless since the traffic should come from a reverse proxy
log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`);
res.render('login', {
res.status(401).render('login', {
failedAuth: true,
assetPath: assetPath
});