fail password change on authentication failure

TeskaLabs · May 9, 2024 · 66d9326 · 66d9326
1 parent 3fa5e7a
commit 66d9326
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/seacatauth/credentials/change_password/handler.py b/seacatauth/credentials/change_password/handler.py
@@ -70,6 +70,7 @@ async def change_password(self, request, *, json_data):
 				"cid": credentials_id, "from_ip": from_ip})
 			await self.LastActivityService.update_last_activity(
 				EventCode.PASSWORD_CHANGE_FAILED, credentials_id=credentials_id, from_ip=from_ip)
+			return asab.web.rest.json_response(request, status=401, data={"result": "FAILED"})
 
 		# Change the password
 		try: