Action Login Flow - Why api.access.deny() generates only an HTTP 500 Internal Server Error?

Hi @nam.liberty,

Please check out our Password Rotation integration on the same functionality as your current Rule.

Unfortunately, it is not possible to generate other HTTP codes with the api.access.deny() method. For now, you can only specify the reason with this method and throw the error.

Here is a helpful resource to help you with your migration to Actions:

Please let me know if you have any questions.

Thanks,
Rueben