Add an explicit "incorrect password" authentication failure reason
This commit is contained in:
parent
0871d6ebc1
commit
138b368951
|
@ -108,9 +108,10 @@ public class AccountAuthenticator implements Authenticator<BasicCredentials, Aut
|
||||||
SaltedTokenHash.generateFor(basicCredentials.getPassword())); // new credentials have current version
|
SaltedTokenHash.generateFor(basicCredentials.getPassword())); // new credentials have current version
|
||||||
}
|
}
|
||||||
return Optional.of(new AuthenticatedAccount(authenticatedAccount, device.get()));
|
return Optional.of(new AuthenticatedAccount(authenticatedAccount, device.get()));
|
||||||
|
} else {
|
||||||
|
failureReason = "incorrectPassword";
|
||||||
|
return Optional.empty();
|
||||||
}
|
}
|
||||||
|
|
||||||
return Optional.empty();
|
|
||||||
} catch (IllegalArgumentException | InvalidAuthorizationHeaderException iae) {
|
} catch (IllegalArgumentException | InvalidAuthorizationHeaderException iae) {
|
||||||
failureReason = "invalidHeader";
|
failureReason = "invalidHeader";
|
||||||
return Optional.empty();
|
return Optional.empty();
|
||||||
|
|
Loading…
Reference in New Issue