Strapi /auth/local api throws 500 error for wrong password or email not confirmed

Just tested in the latest version, both cases work and get appropriate messages.

I get the correct errors.When using wrong password I get:

{
	"data": null,
	"error": {
		"status": 400,
		"name": "ValidationError",
		"message": "Invalid identifier or password",
		"details": {}
	}
}

When ‘blocked’ I get this error:

{
	"data": null,
	"error": {
		"status": 400,
		"name": "ApplicationError",
		"message": "Your account has been blocked by an administrator",
		"details": {}
	}
}
1 Like