https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40596 --- Comment #40 from Martin Renvoize (ashimema) <martin.renvoize@openfifth.co.uk> --- Created attachment 195791 --> https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195791&action=edit Bug 40596: Update C4::Auth to use CAS identity providers Removes the syspref-driven $cas/$caslogout module globals and the conditional loading of C4::Auth_with_cas from the BEGIN block. C4::Auth_with_cas is now imported unconditionally. CAS presence is detected at runtime from the identity_providers table rather than from the casAuthentication system preference: - The casAuthentication template variable is now set from a live DB count of enabled CAS providers. - Login-page CAS URL rendering iterates over identity provider codes instead of Auth_cas_servers.yaml keys; the old ?cas= query parameter is replaced by the cas_provider= parameter embedded in the service URL. - The ticket-validation condition in checkauth and checkpw checks for the cas_provider CGI parameter rather than the $cas global. - cas_provider is stored in the user session alongside cas_ticket so logout_cas receives the correct provider code on sign-out. - The forced-SSO redirect for CAS providers uses login_cas_url() directly with the provider's code. - Proxy-ticket (PT) handling in check_api_auth no longer requires the casAuthentication syspref to be enabled. -- You are receiving this mail because: You are watching all bug changes.