Fix /activate to report invalid auth_tag instead of failing silently

Signed-off-by: Jean Snyman <[email protected]>

keylime/web/registrar/agents_controller.py

@@ -2,8 +2,6 @@
 from keylime.models import RegistrarAgent
 from keylime.web.base import Controller
 
-logger = keylime_logging.init_logging("registrar")
-
 
 class AgentsController(Controller):
     # GET /v2[.:minor]/agents/
@@ -63,11 +61,15 @@ def activate(self, agent_id, auth_tag, **params):
             return
 
         accepted = agent.verify_ak_response(auth_tag)
-        agent.commit_changes()
-        self.respond(200, "Success")
 
-        if not accepted:
-            logger.warning(
-                f"Auth tag '{auth_tag}' for agent '{agent_id}' does not match expected value. It will need to be "
-                f"restarted in order to reattempt registration."
+        if accepted:
+            agent.commit_changes()
+            self.respond(200, "Success")
+        else:
+            agent.delete()
+
+            self.respond(
+                400,
+                f"Auth tag '{auth_tag}' for agent '{agent_id}' does not match expected value. The agent has been "
+                f"deleted from the database and will need to be restarted to reattempt registration",
             )