Changeset 7108

Timestamp:

04/06/10 16:08:46 (2 years ago)

Author:

GeorgeClark

Message:

Item1029: Change back to 200 for authentication failure.

File:

• trunk/core/lib/Foswiki/LoginManager/TemplateLogin.pm (modified) (1 diff)

trunk/core/lib/Foswiki/LoginManager/TemplateLogin.pm

@@ -190 +190 @@
         }
         else {
-            $session->{response}->status(403);
+            # Tasks:Item1029  After much discussion, the 403 code is not used for authentication failures.
+            # RFC states: "Authorization will not help and the request SHOULD NOT be repeated" which is not
+            # the situation here.  
+            $session->{response}->status(200);
             $session->logEvent( 'login', $web . '.' . $topic, "AUTHENTICATION FAILURE - $loginName - " );
             $banner = $session->templates->expandTemplate('UNRECOGNISED_USER');