登录失败返回 200 Ok

[Falco]

@uckelman

但状态仍然是 200。这是一个 bug 吗？

Log Invalid Login Attempts for Fail2ban and upstream server action

Twitter uses 400 for wrong password, but Facebook, LinkedIn, Google and Amazon returns a 200. IMO a 200 sounds wrong, but it appears to be the “normal” thing? Maybe you can start with a plugin that hooks into this method here And does what you need?