1
0
mirror of https://github.com/flarum/core.git synced 2025-08-01 06:00:24 +02:00

Send a HTTP 401 for incorrect login credentials

This fixes a regression from #1843 and #1854. Now, the frontend again
shows the proper "Incorrect login details" message instead of "You
do not have permission to do that".
This commit is contained in:
Franz Liedke
2019-09-13 14:38:06 +02:00
parent c330662241
commit 538136153c
2 changed files with 31 additions and 2 deletions

View File

@@ -12,7 +12,7 @@
namespace Flarum\Api\Controller;
use Flarum\Http\AccessToken;
use Flarum\User\Exception\PermissionDeniedException;
use Flarum\User\Exception\NotAuthenticatedException;
use Flarum\User\UserRepository;
use Illuminate\Contracts\Bus\Dispatcher as BusDispatcher;
use Illuminate\Contracts\Events\Dispatcher as EventDispatcher;
@@ -65,7 +65,7 @@ class CreateTokenController implements RequestHandlerInterface
$user = $this->users->findByIdentification($identification);
if (! $user || ! $user->checkPassword($password)) {
throw new PermissionDeniedException;
throw new NotAuthenticatedException;
}
$token = AccessToken::generate($user->id, $lifetime);