Display Captcha Lock-out on Request

[indexzero]

JIRA ... is total garbage. Just complete & total garbage. We should tell people when they are being garbaged by the garbage software so they can tell the garbage to be less garbage. Garbage!

CAPTCHA
A CAPTCHA is 'triggered' after several consecutive failed log in attempts, after which the user is required to interpret a distorted picture of a word and type that word into a text field with each subsequent log in attempt. If CAPTCHA has been triggered, you cannot use Jira's REST API to authenticate with the Jira site.

You can check this in the error response from Jira -- If there is an X-Seraph-LoginReason header with a a value of AUTHENTICATION_DENIED, this means the application rejected the login without even checking the password. This is the most common indication that Jira's CAPTCHA feature has been triggered.

Source: JIRA the destructor of productivity

Example response from CURL:

< X-AREQUESTID: REDACTED
< X-ANODEID: REDACTED
< X-XSS-Protection: 1; mode=block
< X-Content-Type-Options: nosniff
< X-Frame-Options: SAMEORIGIN
< Content-Security-Policy: frame-ancestors 'self'
< X-ASEN: SEN-REDACTED
< Set-Cookie: JSESSIONID=REDACTED; Path=/; Secure; HttpOnly
< X-Seraph-LoginReason: AUTHENTICATION_DENIED
< WWW-Authenticate: OAuth realm="REDACTED"
< X-ASESSIONID: REDACTED
< X-Authentication-Denied-Reason: CAPTCHA_CHALLENGE; login-url=REDACTED