diff --git a/app/controllers/accounts_controller.rb b/app/controllers/accounts_controller.rb
index f70cd5773..2046dfa20 100644
--- a/app/controllers/accounts_controller.rb
+++ b/app/controllers/accounts_controller.rb
@@ -205,9 +205,9 @@ class AccountsController < ApplicationController
       return
     end
 
+    LimitForbidControl::UserLogin.new(@user).clear
     successful_authentication(@user)
     sync_pwd_to_gitea!(@user, {password: params[:password].to_s}) # TODO用户密码未同步
-    LimitForbidControl::UserLogin.new(user).clear
     
     # session[:user_id] = @user.id
   end