Handle non-2fa forbidden messages on login

heroku / identity

[DEPRECATED] Login and OAuth management service for Heroku

https://id.heroku.com/

MIT License

246 stars 20 forks source link

Closed dmcinnes closed 8 years ago

dmcinnes commented 8 years ago

On POST /login, we weren't handling 403 FORBIDDEN responses from API that aren't 2fa related, so they show to the user as 500 errors.

Ready for review @heroku/api

dmcinnes commented 8 years ago

Pulling this in