Неудачный вход возвращает 200 Ok

[Falco]

@Joel Uckelman

но статус всё ещё 200. Это ошибка?

Log Invalid Login Attempts for Fail2ban and upstream server action

Twitter uses 400 for wrong password, but Facebook, LinkedIn, Google and Amazon returns a 200. IMO a 200 sounds wrong, but it appears to be the “normal” thing? Maybe you can start with a plugin that hooks into this method here And does what you need?