https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38826 Bug ID: 38826 Summary: C4::Auth::check_api_auth sometimes returns $session and sometimes returns $sessionID Change sponsored?: --- Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Authentication Assignee: koha-bugs@lists.koha-community.org Reporter: dcook@prosentient.com.au QA Contact: testopia@bugs.koha-community.org CC: dpavlin@rot13.org As I discovered while troubleshooting an issue with bug 37060, it appears that C4::Auth::check_api_auth sometimes returns $session and sometimes returns $sessionID. After grepping through the code, it seems that the only file that uses the $sessionID return value from C4::Auth::check_api_auth is svc/authentication so it looks like it's the only affected file. Note: $sessionID is returned on a successful login, while $session is returned when we have a cookie for an authenticated session. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.