summaryrefslogtreecommitdiffstats
path: root/lib
diff options
context:
space:
mode:
authorJoas Schilling <213943+nickvergessen@users.noreply.github.com>2021-04-27 14:37:28 +0200
committerGitHub <noreply@github.com>2021-04-27 14:37:28 +0200
commitc52a026f55c70bee22036d28dda01eae087e0c7a (patch)
treefbe17f895f7526629ee9375b39cf0f1d60c5c209 /lib
parentbf1c875425e7fdf5ffd3c233ddf1f567428b4168 (diff)
parent83e10b7a736f7cfa9c933d0476b4784a062bb222 (diff)
downloadnextcloud-server-c52a026f55c70bee22036d28dda01eae087e0c7a.tar.gz
nextcloud-server-c52a026f55c70bee22036d28dda01eae087e0c7a.zip
Merge pull request #26572 from nextcloud/bugfix/noid/throw-401-when-authentication-is-provided-and-invalid
Throw "401 Unauthenticated" when authentication is provided but invalid
Diffstat (limited to 'lib')
-rw-r--r--lib/private/User/Session.php2
1 files changed, 2 insertions, 0 deletions
diff --git a/lib/private/User/Session.php b/lib/private/User/Session.php
index c33d79b83cf..5e6501f9045 100644
--- a/lib/private/User/Session.php
+++ b/lib/private/User/Session.php
@@ -599,6 +599,8 @@ class Session implements IUserSession, Emitter {
return true;
}
+ // If credentials were provided, they need to be valid, otherwise we do boom
+ throw new LoginException();
} catch (PasswordLoginForbiddenException $ex) {
// Nothing to do
}