mirror of
				https://github.com/zadam/trilium.git
				synced 2025-11-03 20:06:08 +01:00 
			
		
		
		
	fix: log same error message on api 401 as on login error to allow fail2ban blocking (#6782)
This commit is contained in:
		@@ -159,6 +159,7 @@ function checkCredentials(req: Request, res: Response, next: NextFunction) {
 | 
				
			|||||||
 | 
					
 | 
				
			||||||
    if (!passwordEncryptionService.verifyPassword(password)) {
 | 
					    if (!passwordEncryptionService.verifyPassword(password)) {
 | 
				
			||||||
        res.setHeader("Content-Type", "text/plain").status(401).send("Incorrect password");
 | 
					        res.setHeader("Content-Type", "text/plain").status(401).send("Incorrect password");
 | 
				
			||||||
 | 
					        log.info(`WARNING: Wrong password from ${req.ip}, rejecting.`);
 | 
				
			||||||
    } else {
 | 
					    } else {
 | 
				
			||||||
        next();
 | 
					        next();
 | 
				
			||||||
    }
 | 
					    }
 | 
				
			||||||
 
 | 
				
			|||||||
		Reference in New Issue
	
	Block a user