From f83bd60915840d3241e18d9fd9b2cb6c0d6e8621 Mon Sep 17 00:00:00 2001
From: Panagiotis Papadopoulos <102623907+pano9000@users.noreply.github.com>
Date: Thu, 6 Nov 2025 08:40:46 +0100
Subject: [PATCH] fix: 403 http error code on failed login (#1756)

---
 pkg/user/error.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/pkg/user/error.go b/pkg/user/error.go
index 9e0517206..0d863a05b 100644
--- a/pkg/user/error.go
+++ b/pkg/user/error.go
@@ -222,10 +222,10 @@ const ErrCodeWrongUsernameOrPassword = 1011
 
 // HTTPError holds the http error description
 func (err ErrWrongUsernameOrPassword) HTTPError() web.HTTPError {
-	return web.HTTPError{HTTPCode: http.StatusPreconditionFailed, Code: ErrCodeWrongUsernameOrPassword, Message: "Wrong username or password."}
+	return web.HTTPError{HTTPCode: http.StatusForbidden, Code: ErrCodeWrongUsernameOrPassword, Message: "Wrong username or password."}
 }
 
-// IsErrWrongUsernameOrPassword checks if an error is a IsErrEmailNotConfirmed.
+// IsErrWrongUsernameOrPassword checks if an error is a ErrWrongUsernameOrPassword.
 func IsErrWrongUsernameOrPassword(err error) bool {
 	_, ok := err.(ErrWrongUsernameOrPassword)
 	return ok
@@ -248,7 +248,7 @@ func (err ErrEmailNotConfirmed) HTTPError() web.HTTPError {
 	return web.HTTPError{HTTPCode: http.StatusPreconditionFailed, Code: ErrCodeEmailNotConfirmed, Message: "Please confirm your email address."}
 }
 
-// IsErrEmailNotConfirmed checks if an error is a IsErrEmailNotConfirmed.
+// IsErrEmailNotConfirmed checks if an error is a ErrEmailNotConfirmed.
 func IsErrEmailNotConfirmed(err error) bool {
 	_, ok := err.(ErrEmailNotConfirmed)
 	return ok