[Koha-bugs] [Bug 28507] New: Create Koha::Session wrapper to create consistent sessions throughout Koha
bugzilla-daemon at bugs.koha-community.org
bugzilla-daemon at bugs.koha-community.org
Thu Jun 3 03:25:03 CEST 2021
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=28507
Bug ID: 28507
Summary: Create Koha::Session wrapper to create consistent
sessions throughout Koha
Change sponsored?: ---
Product: Koha
Version: master
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: P5 - low
Component: Architecture, internals, and plumbing
Assignee: koha-bugs at lists.koha-community.org
Reporter: dcook at prosentient.com.au
QA Contact: testopia at bugs.koha-community.org
At the moment, there are a couple different places where authenticated sessions
get created. One is checkauth() and another is check_api_auth().
I would also like to create consistently structured authenticated sessions from
Koha Plugins.
There should be a standard API for creating and fetching sessions. I propose a
Koha::Session wrapper.
It will define Koha's standard session key set and have some automatic
population for things like 'ip' and 'lasttime'.
There will also be a method for setting the C4::Context->userenv, which is
something that gets done repeatedly in checkauth(), check_api_auth(),
check_cookie_auth(), and other less relevant places (like checkpw_internal
which is bizarre).
I think that this is a reasonable step forward as we add AuthN and AuthZ to
things like Koha plugins and Mojolicious controllers.
--
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
More information about the Koha-bugs
mailing list