2223d19997
Fixes #12131 If we hit an expired token there is no need to continue checking. Since we know it is a token. We also should not register this with the bruteforce throttler as it is actually a valid token. Just expired. Instead the authentication should fail. And buisness continues as usual. Signed-off-by: Roeland Jago Douma <roeland@famdouma.nl> |
||
---|---|---|
.. | ||
Backend.php | ||
Database.php | ||
LoginException.php | ||
Manager.php | ||
NoUserException.php | ||
Session.php | ||
User.php |