[Koha-bugs] [Bug 32354] New: Handle session_state param given by OAuth identity provider

bugzilla-daemon at bugs.koha-community.org bugzilla-daemon at bugs.koha-community.org
Sun Nov 27 22:24:09 CET 2022


https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=32354

            Bug ID: 32354
           Summary: Handle session_state param given by OAuth identity
                    provider
 Change sponsored?: ---
           Product: Koha
           Version: master
          Hardware: All
                OS: All
            Status: NEW
          Severity: blocker
          Priority: P5 - low
         Component: Authentication
          Assignee: koha-bugs at lists.koha-community.org
          Reporter: aleisha at catalyst.net.nz
        QA Contact: testopia at bugs.koha-community.org
                CC: dpavlin at rot13.org

We're trying Bug 31378 in production with OpenID Connect and Azure AD.

Azure is passing back a parameter session_state which causes Koha to throw a
'malformed query string' error

[{"message":"Malformed query string","path":"\/query\/session_state"}]

Believe this means we need to add session_state to the list of parameters Koha
can expect from the IdP.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.


More information about the Koha-bugs mailing list