Add more informative error response on incorrect CAPTCHA

This commit is contained in:
Omar Roth 2018-11-17 13:26:24 -06:00
parent d185ba84bf
commit cd482cfd89
2 changed files with 7 additions and 2 deletions

View File

@ -831,7 +831,12 @@ post "/login" do |env|
begin
validate_response(challenge, token, answer, "sign_in", HMAC_KEY, PG_DB)
rescue ex
error_message = ex.message
if ex.message && ex.message == "Invalid user"
error_message = "Invalid CAPTCHA response"
else
error_message = ex.message
end
next templated "error"
end

View File

@ -251,7 +251,7 @@ def validate_response(challenge, token, user_id, operation, key, db)
end
if challenge_user_id != user_id
raise "Invalid token"
raise "Invalid user"
end
if expire < Time.now.to_unix