Failed login returns 200 Ok

[Falco]

@uckelman

but the status is still 200. Is this a bug?

Log Invalid Login Attempts for Fail2ban and upstream server action

Twitter uses 400 for wrong password, but Facebook, LinkedIn, Google and Amazon returns a 200. IMO a 200 sounds wrong, but it appears to be the “normal” thing? Maybe you can start with a plugin that hooks into this method here And does what you need?