Fix issue for 'double' access fail count on invalid sign in

ministryofjustice · Aug 20, 2024 · 4a20bd7 · 4a20bd7
1 parent faf3863
commit 4a20bd7
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/Infrastructure/Services/Identity/CustomSigninManager.cs b/src/Infrastructure/Services/Identity/CustomSigninManager.cs
@@ -20,6 +20,11 @@ public override async Task<SignInResult> PasswordSignInAsync(string userName, st
 
         var passwordCheckResult = await CheckPasswordSignInAsync(user, password, lockoutOnFailure);
 
+        if(passwordCheckResult.Succeeded is false)
+        {
+            return passwordCheckResult;
+        }
+
         if (PasswordChecksOutAndRequiresPasswordReset(passwordCheckResult, user))
         {
             return CustomSignInResult.PasswordResetRequired;