mirror of
				https://github.com/zadam/trilium.git
				synced 2025-10-31 03:29:02 +01:00 
			
		
		
		
	wrong password login screen should return 401 so that it counts to the rate limiter, fixes #3867
This commit is contained in:
		
							parent
							
								
									e24d5a6f83
								
							
						
					
					
						commit
						eff567ee48
					
				
							
								
								
									
										4
									
								
								package-lock.json
									
									
									
										generated
									
									
									
								
							
							
						
						
									
										4
									
								
								package-lock.json
									
									
									
										generated
									
									
									
								
							| @ -1,12 +1,12 @@ | |||||||
| { | { | ||||||
|   "name": "trilium", |   "name": "trilium", | ||||||
|   "version": "0.59.3", |   "version": "0.59.4", | ||||||
|   "lockfileVersion": 2, |   "lockfileVersion": 2, | ||||||
|   "requires": true, |   "requires": true, | ||||||
|   "packages": { |   "packages": { | ||||||
|     "": { |     "": { | ||||||
|       "name": "trilium", |       "name": "trilium", | ||||||
|       "version": "0.59.3", |       "version": "0.59.4", | ||||||
|       "hasInstallScript": true, |       "hasInstallScript": true, | ||||||
|       "license": "AGPL-3.0-only", |       "license": "AGPL-3.0-only", | ||||||
|       "dependencies": { |       "dependencies": { | ||||||
|  | |||||||
| @ -76,7 +76,7 @@ function login(req, res) { | |||||||
|         // note that logged IP address is usually meaningless since the traffic should come from a reverse proxy
 |         // note that logged IP address is usually meaningless since the traffic should come from a reverse proxy
 | ||||||
|         log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`); |         log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`); | ||||||
| 
 | 
 | ||||||
|         res.render('login', { |         res.status(401).render('login', { | ||||||
|             failedAuth: true, |             failedAuth: true, | ||||||
|             assetPath: assetPath |             assetPath: assetPath | ||||||
|         }); |         }); | ||||||
|  | |||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user
	 zadam
						zadam