From 05924f2c676bfcbe61ff55cea50c5151f2a854a5 Mon Sep 17 00:00:00 2001
From: Derf Null <derf@finalrewind.org>
Date: Sun, 25 Jun 2023 23:28:38 +0200
Subject: Login: return HTTP 400 on invalid password or unconfirmed account

---
 t/02-registration.t | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

(limited to 't')

diff --git a/t/02-registration.t b/t/02-registration.t
index b588d15..53f772f 100644
--- a/t/02-registration.t
+++ b/t/02-registration.t
@@ -88,7 +88,7 @@ $t->post_ok(
 		password   => 'foofoofoo',
 	}
 );
-$t->status_is(200)->content_like(qr{nicht freigeschaltet});
+$t->status_is(400)->content_like(qr{nicht freigeschaltet});
 
 my $res = $t->app->pg->db->select( 'users', ['id'], { name => 'someone' } );
 my $uid = $res->hash->{id};
@@ -108,7 +108,7 @@ $t->post_ok(
 		password   => 'definitely invalid',
 	}
 );
-$t->status_is(200)->content_like(qr{falsches Passwort});
+$t->status_is(400)->content_like(qr{falsches Passwort});
 
 # Successful login
 $t->post_ok(
-- 
cgit v1.2.3