okta / okta-signin-widget

HTML/CSS/JS widget that provides out-of-the-box authentication UX for your organization's apps
Other
376 stars 319 forks source link

LockOut Event does not trigger any event hook such as onError #2057

Open football52 opened 3 years ago

football52 commented 3 years ago

:information_source: If you have a question, please post it on the Okta Developer Forum instead. Issues in this repository are reserved for bug reports and feature requests.

I'm submitting a

Background info

When a user is locked and tries to login, the /authn API returns HTTP 200 with a response with "status":"LOCKED_OUT". No event hook is firing when retrieving this status

Expected behavior

onError should fire because this is an authentication error

What went wrong?

Please provide log or error messages if applicable.

Steps to reproduce

Password Policy must lock user after N amount of unsuccessful attempts Login with wrong password until N number attempts is hit. On the N'th attempt, the widget displays default "LOCKED_OUT" message error.auth.lockedOut = Your account is locked. Please contact your administrator. errors.E0000069 = Your account is locked because of too many authentication attempts.

The correct message is being displayed, but the onError never fires.

Your environment

Okta Hosted Login Page

shuowu commented 3 years ago

@football52 Thanks for reporting the issue! Our team will investigate and follow up on it.

Internal ref: OKTA-405208