mirror of
https://github.com/pi-hole/web.git
synced 2026-08-25 15:42:20 +01:00
FTL answers a wrong password with a session that is not valid, and refuses a login for reasons of its own - `api_seats_exceeded`, a read-only configuration - with an error object instead. The form treated both the same: it marked the password field *and* the 2FA field as wrong for every failure, so `API seats exceeded` arrived looking like a typo in a password that was perfectly correct. The message and its hint were shown before and still are. What changes is the highlighting: the 2FA field is marked only when the token was what got rejected, and the password field only when the password was. Signed-off-by: DL6ER <dl6er@dl6er.de>