May 2026 - Koha-bugs - lists.koha-community.org

[Bug 38940] New: ConsiderLibraryHoursInCirculation set to "shorten the loan period and set the checkout to be due at the library’s close time" does not appear to work
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38940 Bug ID: 38940 Summary: ConsiderLibraryHoursInCirculation set to "shorten the loan period and set the checkout to be due at the library’s close time" does not appear to work Change sponsored?: --- Product: Koha Version: 24.05 Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: sbrown(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle.m.hall(a)gmail.com If I have ConsiderLibraryHoursInCirculation set to "shorten the loan period and set the checkout to be due at the library’s close time" and check out an item whose loan period should be shortened to account for closing hours, the loan period isn't being shortened as expected. To replicate: -Set ConsiderLibraryHoursInCirculation to "shorten the loan period and set the checkout to be due at the library’s close time" -Set Library A's hours from any opening time (I used 8a) to 12p -Set a circ rule for all patron types/test item type for hourly loans using the number of hours that would go past your closing time (test: 3 hours) -Check out the test item type at a time when the loan period should be shortened (test: 11.30a) -Note that the loan period is not shortened (test: 2.30p) despite the closing time and system preference -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 19

[Bug 41671] New: OAuth2 authorization code grant for REST API
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41671 Bug ID: 41671 Summary: OAuth2 authorization code grant for REST API Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: new feature Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au QA Contact: testopia(a)bugs.koha-community.org CC: tomascohen(a)gmail.com At the moment, we only allow app-to-app access via HTTP Basic Auth or OAuth2 client credentials. This gives third-party apps access to a lot of functionality and data across all users. This has data privacy/security implications. Ideally, it would be great if third-party apps could require users to integrate with Koha using an OAuth2 authorization code grant, so that the third-party app could get access tokens scoped to the individual user which authenticates against Koha (and not via the third-party app). The scopes applied to to the token could be limited and the user could give consent for those scopes. And most of all... the third-party app would only be able to use that token for that user. This limits what the third-party app can do and what it can see. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 10

[Bug 25796] New: Allow REST API to use external OAuth2 authorization server
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25796 Bug ID: 25796 Summary: Allow REST API to use external OAuth2 authorization server Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: REST API Assignee: koha-bugs(a)lists.koha-community.org Reporter: dcook(a)prosentient.com.au At the moment, Koha's REST API only validates tokens using the embedded authorization server Net::OAuth2::AuthorizationServer. It would be great if Koha were configured to use an external authorization server (like Keycloak). We could redirect the /token endpoint to Keycloak, or just require consumers to query Keycloak directly for access tokens I suppose. Then we'd set up Koha to either embed (or more sustainably fetch) Keycloak's public key in order to verify that the access token is coming from Keycloak. We'd then do further token validation (to make sure it's not expired, it's for the correct audience, etc). -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 17

[Bug 40467] New: t/00-deprecated.t no longer needed
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40467 Bug ID: 40467 Summary: t/00-deprecated.t no longer needed Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org it only tests for the presence of "switch" -- You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 41449] New: Reserves.t may fail when on shelf holds are restricted
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41449 Bug ID: 41449 Summary: Reserves.t may fail when on shelf holds are restricted Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: minor Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org [1] Around line 1486, it is assumed that onshelfholds == 1. If you set the circ rule to If any unavailabe, the test fails. t/db_dependent/Reserves.t .. 60/71 # Failed test 'Item not available for item-level hold because no effective item type' # at t/db_dependent/Reserves.t line 1486. # Looks like you failed 1 test of 3. => Fix that assumption. Note btw that the lines following the error, onshelfholds is set to 0. [2] The test description is misleading and incorrect (copied from an earlier one, not adjusted) ok( C4::Reserves::IsAvailableForItemLevelRequest( $item, $patron ), "Item not available for item-level hold because no effective item type" ); => The item is available because '0' is defined. -- You are receiving this mail because: You are watching all bug changes.

1 18

[Bug 25551] New: [OMNIBUS] Some tests are failing randomly
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25551 Bug ID: 25551 Summary: [OMNIBUS] Some tests are failing randomly Change sponsored?: --- Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: jonathan.druart(a)bugs.koha-community.org QA Contact: testopia(a)bugs.koha-community.org Keep this open to group tests that are failing randomly -- You are receiving this mail because: You are watching all bug changes.

1 88

[Bug 41384] New: SIP2/Accounts.ts is failing randomly
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41384 Bug ID: 41384 Summary: SIP2/Accounts.ts is failing randomly Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 41357 Koha_Main/3473 01:59:39 koha-1 | Running: SIP2/Accounts.ts (34 of 42) 01:59:39 koha-1 | <?xml version="1.0" encoding="UTF-8"?> 01:59:39 koha-1 | <testsuites name="Mocha Tests" time="32.403" tests="5" failures="1"> 01:59:39 koha-1 | <testsuite name="Root Suite" timestamp="2025-12-05T00:59:07" tests="0" file="t/cypress/integration/SIP2/Accounts.ts" time="0.000" failures="0"> 01:59:39 koha-1 | </testsuite> 01:59:39 koha-1 | <testsuite name="Accounts" timestamp="2025-12-05T00:59:07" tests="5" time="32.345" failures="1"> 02:00:21 koha-1 | <testcase name="Accounts List accounts" time="5.830" classname="List accounts"> 02:00:21 koha-1 | </testcase> 02:00:21 koha-1 | <testcase name="Accounts Add account" time="0.000" classname="Add account"> 02:00:21 koha-1 | <failure message="Timed out retrying after 10000ms: Expected to find content: 'Books' within the element: <li#vs3__option-0.vs__dropdown-option> but never did." type="AssertionError"><![CDATA[AssertionError: Timed out retrying after 10000ms: Expected to find content: 'Books' within the element: <li#vs3__option-0.vs__dropdown-option> but never did. 02:00:21 koha-1 | at Context.eval (webpack://koha/./t/cypress/integration/SIP2/Accounts.ts:181:55)]]></failure> 02:00:21 koha-1 | </testcase> 02:00:21 koha-1 | <testcase name="Accounts Edit account" time="4.317" classname="Edit account"> 02:00:21 koha-1 | </testcase> 02:00:21 koha-1 | <testcase name="Accounts Show account" time="3.213" classname="Show account"> 02:00:21 koha-1 | </testcase> 02:00:21 koha-1 | <testcase name="Accounts Delete account" time="4.571" classname="Delete account"> 02:00:21 koha-1 | </testcase> 02:00:21 koha-1 | </testsuite> 02:00:21 koha-1 | </testsuites> Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41357 [Bug 41357] New SIP2 module is broken -- You are receiving this mail because: You are watching all bug changes.

1 14

[Bug 41812] New: xt/find-missing-csrf.t failing when JS contains csrf_token hidden input
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41812 Bug ID: 41812 Summary: xt/find-missing-csrf.t failing when JS contains csrf_token hidden input Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Test Suite Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 41565 commit 7a80a9be011071d504b7ed2aa2190433aed772a5 Bug 41565: Tidy kohaTable - bookings/list.tt + const csrf_token = $('meta[name="csrf-token"]').attr("content"); result += ` <form name="checkout-transform" method="post" action="/cgi-bin/koha/circ/circulation.pl?borrowernumber=%s"> - [% INCLUDE 'csrf-token.inc' %] + <input type="hidden" name="csrf_token" value="${csrf_token}" /> <input type="hidden" name="op" value="cud-checkout"/> <input type="hidden" name="borrowernumber" value="%s"/> <input type="hidden" name="barcode" value="%s"/> This code injected the csrf token using the TT include file, that made pass xt/find-missing-csrf.t This bug removed the TT tags from the script tags, and we now need to use a JS variable and retrieve the csrf token from the meta tag. The test needs to be adjusted. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41565 [Bug 41565] Tidy kohaTable block - bookings -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 41830] New: Acquisitions/Vendors_spec.ts is failing randomly
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41830 Bug ID: 41830 Summary: Acquisitions/Vendors_spec.ts is failing randomly Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Test Suite Assignee: chris(a)bigballofwax.co.nz Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Blocks: 25551 02:37:32 koha-1 | <testsuite name="Vendor CRUD operations" timestamp="2026-02-11T02:36:31" tests="5" time="38.363" failures="1"> 02:39:26 koha-1 | <testcase name="Vendor CRUD operations should list vendors" time="6.773" classname="should list vendors"> 02:39:26 koha-1 | </testcase> 02:39:26 koha-1 | <testcase name="Vendor CRUD operations should add a vendor" time="0.000" classname="should add a vendor"> 02:39:26 koha-1 | <failure message="Timed out retrying after 10000ms: `cy.type()` failed because this element: 02:39:26 koha-1 | 02:39:26 koha-1 | `<input data-v-2a08b27a="" id="discount" inputmode="numeric" placeholder="Discount (%)" size="6">` 02:39:26 koha-1 | 02:39:26 koha-1 | is being covered by another element: 02:39:26 koha-1 | 02:39:26 koha-1 | `<li class="vs__no-options">Sorry, ...</li>` 02:39:26 koha-1 | 02:39:26 koha-1 | Fix this problem, or use {force: true} to disable error checking. 02:39:26 koha-1 | 02:39:26 koha-1 | https://on.cypress.io/element-cannot-be-interacted-with" type="CypressError"><![CDATA[CypressError: Timed out retrying after 10000ms: `cy.type()` failed because this element: 02:39:26 koha-1 | 02:39:26 koha-1 | `<input data-v-2a08b27a="" id="discount" inputmode="numeric" placeholder="Discount (%)" size="6">` 02:39:26 koha-1 | 02:39:26 koha-1 | is being covered by another element: 02:39:26 koha-1 | 02:39:26 koha-1 | `<li class="vs__no-options">Sorry, ...</li>` 02:39:26 koha-1 | 02:39:26 koha-1 | Fix this problem, or use {force: true} to disable error checking. 02:39:26 koha-1 | 02:39:26 koha-1 | https://on.cypress.io/element-cannot-be-interacted-with 02:39:26 koha-1 | at ensureIsDescendent (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at ensureDescendents (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at ensureDescendentsAndScroll (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at ensureElIsNotCovered (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at runAllChecks (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at retryActionability (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at tryCatcher (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at Promise.attempt.Promise.try (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at whenStable (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at <unknown> (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at tryCatcher (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at Promise._settlePromiseFromHandler (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at Promise._settlePromise (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at Promise._settlePromise0 (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at Promise._settlePromises (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at Promise._fulfill (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | at <unknown> (http://kohadev-intra.mydnsname.org:8081/__cypress/runner/cypress_runner.js:…) 02:39:26 koha-1 | From Your Spec Code: 02:39:26 koha-1 | at Context.eval (webpack://koha/./t/cypress/integration/Acquisitions/Vendors_spec.ts:88:28)]]></failure> 02:39:26 koha-1 | </testcase> 02:39:26 koha-1 | <testcase name="Vendor CRUD operations should edit a vendor" time="4.015" classname="should edit a vendor"> 02:39:26 koha-1 | </testcase> 02:39:26 koha-1 | <testcase name="Vendor CRUD operations should show a vendor" time="3.214" classname="should show a vendor"> 02:39:26 koha-1 | </testcase> 02:39:26 koha-1 | <testcase name="Vendor CRUD operations should delete a vendor" time="4.358" classname="should delete a vendor"> 02:39:26 koha-1 | </testcase> 02:39:26 koha-1 | </testsuite> I don't recreate this one locally. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25551 [Bug 25551] [OMNIBUS] Some tests are failing randomly -- You are receiving this mail because: You are watching all bug changes.

1 14

[Bug 41831] New: ERM/Dialog_spec.ts leaves test data in DB
by bugzilla-daemon＠bugs.koha-community.org 30 Jun '26

30 Jun '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41831 Bug ID: 41831 Summary: ERM/Dialog_spec.ts leaves test data in DB Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Test Suite Assignee: jonathan.druart(a)gmail.com Reporter: jonathan.druart(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org ERM/Titles_spec.ts fails if run after ERM/Dialog_spec.ts because Dialog's "...created!" test create a package and does not delete it. 02:48:52 koha-1 | <failure message="Timed out retrying after 10000ms: Expected to find content: 'There are no packages created yet' within the element: <fieldset#resources_relationship.rows> but never did." type="AssertionError"><![CDATA[AssertionError: Timed out retrying after 10000ms: Expected to find content: 'There are no packages created yet' within the element: <fieldset#resources_relationship.rows> but never did. -- You are receiving this mail because: You are watching all bug changes.

1 10