Login fallito restituisce 200 Ok

[Falco]

@uckelman

ma lo stato è ancora 200. È un bug?

Log Invalid Login Attempts for Fail2ban and upstream server action

Twitter uses 400 for wrong password, but Facebook, LinkedIn, Google and Amazon returns a 200. IMO a 200 sounds wrong, but it appears to be the “normal” thing? Maybe you can start with a plugin that hooks into this method here And does what you need?