search

runbox / runbox7

Runbox 7 web app
Other
125 stars 24 forks source link

#Login: Login for expired accounts displays link to Subscriptions even if password is wrong #1554

Open castaway opened 2 months ago

castaway commented 2 months ago

Describe the bug See title

To Reproduce Steps to reproduce the behavior:

  1. Let a paid account expire (or mark it so in admin)
  2. Visit login page, type username correctly, type passwords incorrectly, submit login form
  3. Display shows link to "Your subscriptions"
  4. It should instead show incorrect username or password, error

Expected behavior Login checks should return password errors before account status errors (and it shouldnt show those errors until after the authentication is confirmed)

Desktop (please complete the following information):