[Koha-bugs] [Bug 24539] Build generic authentication module interface

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=24539

--- Comment #23 from David Cook <dcook at prosentient.com.au> ---
(In reply to mark.jaroski from comment #22)
> I don't know enough about Koha to comment on internal workings, but wouldn't
> you always want a session in most authentication situations?

Yep.

> I guess in the Shibboleth scenario you don't need a session because every
> request comes with the server variable or header, but for things like
> OpenID-Connect you don't want to do the handshake for every page load.

I haven't used the built-in Koha Shibboleth integration. I've implemented my
own custom Koha Shibboleth integration, so I can't comment on how Koha does it
by default. But I just do a once off call to the SAML IdP, create a Koha
session, and then use that from there on out.

-- 
You are receiving this mail because:
You are watching all bug changes.