[Koha-bugs] [Bug 28785] Code in C4::Auth::checkauth is copy pasted

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28785

Owen Leonard <oleonard at myacpl.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
 Attachment #123320|0                           |1
        is obsolete|                            |
 Attachment #123321|0                           |1
        is obsolete|                            |
 Attachment #123322|0                           |1
        is obsolete|                            |
 Attachment #123323|0                           |1
        is obsolete|                            |

--- Comment #10 from Owen Leonard <oleonard at myacpl.org> ---
Created attachment 123392
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=123392&action=edit
Bug 28785: Centralize cookie auth check in check_cookie_auth

This code is duplicated in 3 different places, we must call
check_cookie_auth instead.

It makes check_cookie_auth returns a 'restricted' when
SessionRestrictionByIP is set and the IP changed.
It also returns a third parameters contained the old and new IP, to fill
the "info" hash in checkauth but apparently the oldip and newip
variables are not even used from the template. We may want to remove it
completely.

No change is expected with this patch, the different authentication
methods should still work as before.

Test plan:
Log in the staff and OPAC interfaces, logout.
Log in and call script that call the 3 different subroutines modified by
this patch. For instance you can list checkouts (that is using
check_cookie_auth) and display a patron's image (using check_api_auth).

QA with good knowledge of the C4::Auth module and the different
authentication methods is required.

Signed-off-by: Owen Leonard <oleonard at myacpl.org>

-- 
You are receiving this mail because:
You are watching all bug changes.