jaredhanson/passport — Issue #12: Login failed handling
Author: jacksctsai
Created: 2012-02-12 19:37:13+00:00
State: open

In passport we use authenticate connect/express middleware to handle login.

The problem is, when login failed, the only way now is to redirect back to login url directly without any message to the user.
I think it's better to have certain message for use to be aware or even further to notice the user his/her login account could be locked due to some reason.

It's possible to put a query parameter in the redirected url. But I think that would be a little bit ugly.