cf login command waits for user input after failed login with PASSWORD_LOCKED response

cf login コマンドから開始し、提供されたコマンドと PASSWORD_LOCKED 応答を使ってロックされたユーザーのフローを再現します。認証失敗がパスワードプロンプトにフォールスルーする理由を追跡します。完了条件は、cf login が直ちにゼロ以外のステータスで終了し、別のパスワードを要求しないことです。

Please fill out the issue checklist below and provide ALL the requested information.

• I reviewed open and closed github issues that may be related to my problem.
• I tried updating to the latest version of the CF CLI to see if it fixed my problem.
• I attempted to run the command with CF_TRACE=1 to help debug the issue.
• I am reporting a bug that others will be able to reproduce.

Describe the bug and the command you saw an issue with

When running cf login with supplied user and pw, and the pw is currently locked the login fails, but the CLI call does not exit. Instead, it presents a "Password: " prompt to the user.

When using this in a pipeline environment, this causes the task to hang until timed out, which is not useful.

Even when using this interactively, it makes no sense to prompt for a PW if the user is locked.

What happened

User got locked and pipelines got hung up until timeout.

Expected behavior

On failed login, cf login should immediately exit with a non-zero exit code.

Exact Steps To Reproduce

Lock your user e.g. by entering wrong PW sufficiently (5 times on SAP ID Service) , then run cf login
[note: verbose does not add anything here, so using regular output]

>cf login -a https://api.cf.eu12.hana.ondemand.com -u john.doe@example.com -p "secret" -o myorg -s myspace
API endpoint: https://api.cf.eu12.hana.ondemand.com


Authenticating...
{"error":"invalid_grant","error_description":"User authentication failed: PASSWORD_LOCKED"}

Password: %

Provide more context

• MacOS 15.1.1 and Ubuntu on pipeline
• version of the CLI you are running: 8.9.0+c23186c.2024-12-02