Author: srbauer

Description:
I just tested a API login script and noticed the following behavior:

If username/password are ok, then everything is fine.

If an error occurs a wait=10 is returned (always the same time - wait = 10 seconds?), but if using this wait time with sleep I still get the same error message (password is ok) - if I wait longer (tested with 2 minutes) everything is fine again.

I assume therefore a wrong wait time is returned.

Furthermore I would propose a new result message if an attempt is started without waiting long enough - something like "WaittimeToShort" - would be helpful since in most cases a human person enters the password and tries to figure out if something got wrong.

Version: unspecified
Severity: enhancement