Uploaded image for project: 'MidPoint'
  1. MidPoint
  2. MID-551

Show nice error message when user password is invalid/user is locked/unable to login to the admin interface

    XMLWordPrintable

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • 1.10 (Phoebe)
    • 1.10 (Phoebe)
    • GUI
    • None

    Description

      We need better error messages instead of Tomcat default error messages.

      When user tries to login with invalid login/password, the following page is displayed:
      HTTP Status 401 - Authentication Failed: web.security.provider.invalid

      When user locks himself after maximum login attempts is reached, the following page is displayed:
      HTTP Status 401 - Authentication Failed: web.security.provider.locked

      When user tries to login to administration interface without proper rights, the following page is displayed:
      HTTP Status 403 - Access is denied
      Additionaly, the GUI is unusable from this moment, user keeps redirecting to "Access denied" page. URL cannot be changed to anything working.

      Attachments

        Activity

          People

            vix Ivan Noris
            vix Ivan Noris
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: