Invalid Login Error Code #316

Closed
opened 2025-11-07 06:32:27 -06:00 by GiteaMirror · 3 comments
Owner

Originally created by @uchagani on GitHub (Jun 9, 2019).

Is there a reason bitwarden_rs returns a 400 instead of a 401 or 403 when invalid credentials are entered?

Originally created by @uchagani on GitHub (Jun 9, 2019). Is there a reason bitwarden_rs returns a `400` instead of a `401` or `403` when invalid credentials are entered?
Author
Owner

@mprasil commented on GitHub (Jun 10, 2019):

I believe upstream API implementation also returns 400 or is that not the case?

@mprasil commented on GitHub (Jun 10, 2019): I believe upstream API implementation also returns `400` or is that not the case?
Author
Owner

@uchagani commented on GitHub (Jun 10, 2019):

Not sure tbh. I was just trying to use fail2ban at the reverse proxy layer and saw the 400. I just figured a 403 error would be a more accurate error to look for in the logs.

@uchagani commented on GitHub (Jun 10, 2019): Not sure tbh. I was just trying to use fail2ban at the reverse proxy layer and saw the 400. I just figured a 403 error would be a more accurate error to look for in the logs.
Author
Owner

@mprasil commented on GitHub (Jun 10, 2019):

Just checked and upstream does return 400, so we need to do the same for compatibility reasons.

I'm going to close this now, feel free to reopen if there are any outstanding questions.

@mprasil commented on GitHub (Jun 10, 2019): Just checked and upstream does return `400`, so we need to do the same for compatibility reasons. I'm going to close this now, feel free to reopen if there are any outstanding questions.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/vaultwarden#316