March 2022 - Koha-bugs - lists.koha-community.org

[Bug 29957] Cookies not removed after logout
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|ASSIGNED |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29957] Cookies not removed after logout
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957 --- Comment #63 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 131828 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131828&action=e… Bug 29957: Let check_api_auth return created cookie The cookie created on L1496 is useless, since it is not returned. We could either remove the cookie creation (unchanged behavior). But since check_api_auth is expected to return a cookie when it is ok, I opt for returning the cookie here (corrected behavior). Test plan: Logout in staff. Check on staff: /cgi-bin/koha/svc/localization?id=1 You should have a 400 response. Login with staff credentials (incl. manage_itemtypes) Revisit same URL. You should see a JSON response. Check if you can hit other staff pages. Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29957] Cookies not removed after logout
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #131810|0 |1 is obsolete| | --- Comment #62 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 131827 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131827&action=e… Bug 29957: Adjust push @$cookie statements in Auth We can now use $cookie_mgr->replace_in_list instead. This effectively removes duplicates and keeps the newest cookie. Test plan: Run t/db_dependent/Auth.t Add removable_cookie entries in koha-conf for: form_serialized, form_serialized_limits (Note: these are js cookies, no httponly flag.) Login at OPAC. If you are using the same domain, check if you are logged in on the staff client too. Go back to OPAC, perform an Advanced search. Check cookies on browser dev console. Look for the 2 form_ cookies. Go to staff. Logout Go to OPAC. Check cookies in dev console. Are you logged out? Login at staff again. Hit some pages in the staff client and verify that they respond as expected. Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29957] Cookies not removed after logout
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #131809|0 |1 is obsolete| | --- Comment #61 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 131826 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131826&action=e… Bug 29957: Replace clear_all_cookies in Auth.pm Test plan: Enable language selection and have two languages. Add removable_cookie line for KohaOpacLanguage in koha-conf. Restart, flush. Login, logout from opac or staff. Check in browser dev console that value of this cookie is cleared, noting that the httponly flag has been unset. Remove the added line in koha-conf. Restart, flush. Login. Change language. Logout. Check if cookie is preserved. Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29957] Cookies not removed after logout
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #131808|0 |1 is obsolete| | --- Comment #60 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 131825 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131825&action=e… Bug 29957: Introduce Koha::CookieManager Test plan: Run t/CookieManager.t Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29957] Cookies not removed after logout
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29957 Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #131807|0 |1 is obsolete| | --- Comment #59 from Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> --- Created attachment 131824 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=131824&action=e… Bug 29957: Clear cookies on logout Signed-off-by: Martin Renvoize <martin.renvoize(a)ptfs-europe.com> Signed-off-by: Marcel de Rooy <m.de.rooy(a)rijksmuseum.nl> Amended: Reverted the change to $cookies to minimize changes. Fixed Auth.t where checkauth is being mocked. -- You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 29136] New: Patron search on request.pl has performance and display issues
by bugzilla-daemon＠bugs.koha-community.org 17 Mar '22

17 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=29136 Bug ID: 29136 Summary: Patron search on request.pl has performance and display issues Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Hold requests Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Similar to bug 15812, the patron search on request.pl retrieves all patrons from a search without pagination, so broad searches can have poor performance. Additionally, the datatables call on that page doesn't paginate, so all but the first 20 results are unavailable -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 33

[Bug 15222] Add to cart option/other list options missing from OPAC lists display
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '22

16 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15222 --- Comment #2 from David Cook <dcook(a)prosentient.com.au> --- I had someone point this out to me today. It looks like it's still missing functionality over 6 years later. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 0

[Bug 15222] Add to cart option/other list options missing from OPAC lists display
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '22

16 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=15222 David Cook <dcook(a)prosentient.com.au> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |dcook(a)prosentient.com.au Assignee|gmcharlt(a)gmail.com |koha-bugs(a)lists.koha-commun | |ity.org -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 0

[Bug 30306] New: opac-suggestions.pl?suggested_by_anyone needs to be paginated and better formatting
by bugzilla-daemon＠bugs.koha-community.org 16 Mar '22

16 Mar '22

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=30306 Bug ID: 30306 Summary: opac-suggestions.pl?suggested_by_anyone needs to be paginated and better formatting Change sponsored?: --- Product: Koha Version: 21.11 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: cbrannon(a)cdalibrary.org QA Contact: testopia(a)bugs.koha-community.org opac-suggestions.pl?suggested_by_anyone can go off the page with lengthy notes. The table needs to conform to the display size. Also, it will load absolutely all requests. There should be some pagination involved here, and maybe search criteria for how far back it should go. -- You are receiving this mail because: You are watching all bug changes.

1 1