Merge pull request from GHSA-fw57-f7mq-9q85

ractf · Feb 26, 2021 · cebb67b · cebb67b
1 parent dc06fb4
commit cebb67b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/authentication/views.py b/src/authentication/views.py
@@ -150,7 +150,7 @@ def post(self, request, *args, **kwargs):
                     code.delete()
                     return self.issue_token(user)
 
-        return self.issue_token(user)
+        return FormattedResponse(status=HTTP_401_UNAUTHORIZED, d={'reason': 'login_failed'}, m='login_failed')
 
 
 class RegenerateBackupCodesView(APIView):