Falha no login retorna 200 Ok

[Falco]

@uckelman

mas o status ainda é 200. Isso é um bug?

Log Invalid Login Attempts for Fail2ban and upstream server action

Twitter uses 400 for wrong password, but Facebook, LinkedIn, Google and Amazon returns a 200. IMO a 200 sounds wrong, but it appears to be the “normal” thing? Maybe you can start with a plugin that hooks into this method here And does what you need?