Description of problem: When trying to obtain token from SSO using password grant type, if wrong password or username is specified the authentication fails but SSO returns an error message stating that the session has expired. Version-Release number of selected component (if applicable): 4.0.2 How reproducible: Always Steps to Reproduce: 1. Obtain token from SSO using password grant type curl -v -k -H "Accept: application/json" 'http://127.0.0.1:8080/ovirt-engine/sso/oauth/token?grant_type=password&username=admin@internal&password=wrongpasswd&scope=ovirt-app-api' Actual results: {"error_code":"invalid_grant","error":"Session expired please try again."} Expected results: {"error_code":"access_denied","error":"Cannot authenticate user 'admin@internal': The user name or password is incorrect.."}
Moving back to POST, we need to backport to ovirt-engine-4.0
Verified with: rhevm-4.0.3-0.1.el7ev.noarch {"error_code":"access_denied","error":"Cannot authenticate user 'admin@internal': The user name or password is incorrect.."}