mirror of
https://github.com/discourse/discourse.git
synced 2025-06-01 09:08:10 +08:00
Change the expired nonce return status code from 400 to 419.
This commit is contained in:
@ -57,7 +57,7 @@ class SessionController < ApplicationController
|
||||
|
||||
sso = DiscourseSingleSignOn.parse(request.query_string)
|
||||
if !sso.nonce_valid?
|
||||
return render(text: I18n.t("sso.timeout_expired"), status: 400)
|
||||
return render(text: I18n.t("sso.timeout_expired"), status: 419)
|
||||
end
|
||||
|
||||
if ScreenedIpAddress.should_block?(request.remote_ip)
|
||||
|
Reference in New Issue
Block a user