fail password change on authentication failure

TeskaLabs · May 9, 2024 · e55213a · e55213a
1 parent 0031a1f
commit e55213a
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/seacatauth/credentials/change_password/handler.py b/seacatauth/credentials/change_password/handler.py
@@ -75,6 +75,7 @@ async def change_password(self, request, *, json_data):
 				"cid": credentials_id, "from_ip": from_ip})
 			await self.LastActivityService.update_last_activity(
 				EventCode.PASSWORD_CHANGE_FAILED, credentials_id=credentials_id, from_ip=from_ip)
+			return asab.web.rest.json_response(request, status=401, data={"result": "FAILED"})
 
 		# Change the password
 		try: