- Group Reviewers
- rK60f8cfed258b: Don't call userResponse() on failed login
If the idea is that we don't call userResponse if the $user == null in a failed login case, should we then not also not set the status to 'success' ?
This might be hard to see as it ended up being quite a refactoring. We had one instance where we called userResponse() before respondWithToken(). If you consider respondWithToken() could "respond" with an error (on auth failure) the heavy userResponse() call was redundant. Now we do this only on a successful response.