How to render form on failure

[mwawrusch]

Hi Jared,

I need to render a form on login failure showing an error. What is the most elegant way to do that with password?

[thatmarvin]

I was wondering the same thing. The first example in http://passportjs.org/guide/authenticate.html mentions that Passport returns a 401 Unauthorized, but I don't see a way to do something like rendering a login form. A callback might be useful here?

In the next example, it looks like POSTing to /login with invalid credentials yields a HTTP 302 back to /login. In HTTP speak, the response is saying "/login is temporarily available in /login", which doesn't make sense. Practically speaking, the original POST data (username, password etc) is now lost since the page you now see is a new GET request to /login.

A 401 Unauthorized is the appropriate response in this case ("what you sent to /login is invalid"), but that means that the interface failureRedirect would no longer make sense. Again, maybe a failure callback instead?

[525c1e21-bd67-4735-ac99-b4b0e5262290]

bump

[jaredhanson]

Linking to passport #3, which has relevant discussion on this topic.

[jaredhanson]

A failWithError option has been implemented. It can be used to address this issue as follows:

app.post('/login',
  passport.authenticate('local', { successRedirect: '/home', failWithError: true }),
  function(err, req, res, next) {
    // handle error
    return res.render('login-form');
  }
);

For further details, see this comment on issue #126.