From 4a20bd74dabe6b16441ce2e507bc50881280dec6 Mon Sep 17 00:00:00 2001
From: samgibsonmoj <sam.gibson@justice.gov.uk>
Date: Tue, 20 Aug 2024 14:43:35 +0100
Subject: [PATCH] Fix issue for 'double' access fail count on invalid sign in

---
 src/Infrastructure/Services/Identity/CustomSigninManager.cs | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/Infrastructure/Services/Identity/CustomSigninManager.cs b/src/Infrastructure/Services/Identity/CustomSigninManager.cs
index 2c32d758..1456a311 100644
--- a/src/Infrastructure/Services/Identity/CustomSigninManager.cs
+++ b/src/Infrastructure/Services/Identity/CustomSigninManager.cs
@@ -20,6 +20,11 @@ public override async Task<SignInResult> PasswordSignInAsync(string userName, st
         
         var passwordCheckResult = await CheckPasswordSignInAsync(user, password, lockoutOnFailure);
 
+        if(passwordCheckResult.Succeeded is false)
+        {
+            return passwordCheckResult;
+        }
+
         if (PasswordChecksOutAndRequiresPasswordReset(passwordCheckResult, user))
         {
             return CustomSignInResult.PasswordResetRequired;