fix(handlers): handle xhr requests to /api/verify with 401 (#2189)

This changes the way XML HTTP requests are handled on the verify endpoint so that they are redirected using a 401 instead of a 302/303.

1 files changed, 3 insertions, 3 deletions

diff --git a/internal/handlers/handler_firstfactor_test.go b/internal/handlers/handler_firstfactor_test.go
index 0c005e004..1642c7319 100644
--- a/internal/handlers/handler_firstfactor_test.go
+++ b/internal/handlers/handler_firstfactor_test.go
@@ -454,16 +454,16 @@ func TestFirstFactorDelayCalculations(t *testing.T) {
 	for i := 0; i < 100; i++ {
 		delay := calculateActualDelay(mock.Ctx, execDuration, avgExecDurationMs, &successful)
 		assert.True(t, delay >= expectedMinimumDelayMs)
-		assert.True(t, delay <= expectedMinimumDelayMs+float64(msMaximumRandomDelay))
+		assert.True(t, delay <= expectedMinimumDelayMs+float64(loginDelayMaximumRandomDelayMilliseconds))
 	}
 
 	execDuration = 5 * time.Millisecond
 	avgExecDurationMs = 5.0
-	expectedMinimumDelayMs = msMinimumDelay1FA - float64(execDuration.Milliseconds())
+	expectedMinimumDelayMs = loginDelayMinimumDelayMilliseconds - float64(execDuration.Milliseconds())
 
 	for i := 0; i < 100; i++ {
 		delay := calculateActualDelay(mock.Ctx, execDuration, avgExecDurationMs, &successful)
 		assert.True(t, delay >= expectedMinimumDelayMs)
-		assert.True(t, delay <= expectedMinimumDelayMs+float64(msMaximumRandomDelay))
+		assert.True(t, delay <= expectedMinimumDelayMs+float64(loginDelayMaximumRandomDelayMilliseconds))
 	}
 }