鏡像自
https://github.com/mail-in-a-box/mailinabox.git
已同步 2026-03-16 17:47:23 +01:00
Do not log failed login attempts for MissingToken errors
* Due to the way that the /login UI works, this persists at least one failed login each time a user logs into the admin panel. This in turn triggers fail2ban at some point.
此提交包含在:
@@ -127,9 +127,6 @@ def me():
|
||||
try:
|
||||
email, privs = auth_service.authenticate(request, env)
|
||||
except totp.MissingTokenError as e:
|
||||
# Log the failed login
|
||||
log_failed_login(request)
|
||||
|
||||
return json_response({
|
||||
"status": "missing_token",
|
||||
"reason": str(e),
|
||||
|
||||
新增問題並參考
封鎖使用者