[Bug 12887] New: User logged out on refresh after CAS authentication
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Bug ID: 12887 Summary: User logged out on refresh after CAS authentication Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Authentication Assignee: gmcharlt@gmail.com Reporter: matthias.meusburger@biblibre.com QA Contact: testopia@bugs.koha-community.org CC: dpavlin@rot13.org The user is logged out when refreshing the page directly after a CAS login. Steps to reproduce: 1) Authenticate to the OPAC through CAS. 2) Once redirected to your account, hit F5 or the refresh button of your browser. 3) You're logged out. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Fridolin SOMERS <fridolyn.somers@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fridolyn.somers@biblibre.co | |m -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Corinne Flacher-David <corinne.flacher-david@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |corinne.flacher-david@bibli | |bre.com --- Comment #1 from Corinne Flacher-David <corinne.flacher-david@biblibre.com> --- I add on a test case about user logged out on refresh after CAS authentication : 4) When you try to log in, again, you cannot log in to the Opac. It's impossible. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 --- Comment #2 from Corinne Flacher-David <corinne.flacher-david@biblibre.com> --- I add on a test case about user logged out on refresh after CAS authentication : 4) When you try to log in, again, you cannot authenticate to the OPAC through CAS. It's impossible. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 --- Comment #3 from Matthias Meusburger <matthias.meusburger@biblibre.com> --- I cannot reproduce 4) on master. Relogging works for me. Can you provide more informations about how 4) failed for you ? -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 --- Comment #4 from Matthias Meusburger <matthias.meusburger@biblibre.com> --- Anyway, the logout occurs because directly after login the ticket parameter is still in the url. When pressing refresh, the page is called again with the ticket parameter, which will trigger ticket validation, that will fail because the ticket has already been used, provoking the logout. A possible fix would be to check if the user is already logged-in and prevent CAS ticket validation if it is the case. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 --- Comment #5 from Matthias Meusburger <matthias.meusburger@biblibre.com> --- Created attachment 36498 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=36498&action=edit Bug 12887: User logged out on refresh after CAS authentication - If the user is already logged-in, do not trigger CAS authentication even if there is a ticket in the parameters. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Matthias Meusburger <matthias.meusburger@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |Needs Signoff -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 LuceBarbey <luce.barbey@cirad.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |luce.barbey@cirad.fr -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Koha Team Lyon 3 <koha@univ-lyon3.fr> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Needs Signoff |Signed Off CC| |koha@univ-lyon3.fr --- Comment #6 from Koha Team Lyon 3 <koha@univ-lyon3.fr> --- Tested on a sandbox : 1. I've Changed this syspref : casAuthentication (use), casServerUrl, OPACBaseURL 2. Go to the opac and connect this CAS authentication 3. refresh the page (I've tried F5 and the refresh button) : I'm still logged in. 4. I've tried to deconnect and reconnect : no problem. It works ! -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 --- Comment #7 from LuceBarbey <luce.barbey@cirad.fr> --- I've also tested and it works for me too -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Jonathan Druart <jonathan.druart@biblibre.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |jonathan.druart@biblibre.co | |m Assignee|gmcharlt@gmail.com |matthias.meusburger@biblibr | |e.com -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Signed Off |Passed QA Patch complexity|--- |Small patch -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Katrin Fischer <katrin.fischer@bsz-bw.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #36498|0 |1 is obsolete| | --- Comment #8 from Katrin Fischer <katrin.fischer@bsz-bw.de> --- Created attachment 36676 --> http://bugs.koha-community.org/bugzilla3/attachment.cgi?id=36676&action=edit [PASSED QA] Bug 12887: User logged out on refresh after CAS authentication If the user is already logged-in, do not trigger CAS authentication even if there is a ticket in the parameters. 1) Authenticate to the OPAC through CAS. 2) Once redirected to your account, hit F5 or the refresh button of your browser. 3) You're logged out. Signed-off-by: Koha Team Lyon 3 <koha@univ-lyon3.fr> Signed-off-by: Luce Barbey <luce.barbey@cirad.fr> Signed-off-by: Katrin Fischer <katrin.fischer.83@web.de> Added sign of lines according to bug. Works as described, small change. -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Tomás Cohen Arazi <tomascohen@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|Passed QA |Pushed to Master CC| |tomascohen@gmail.com --- Comment #9 from Tomás Cohen Arazi <tomascohen@gmail.com> --- Patch pushed to master. Thanks Matthias! -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Chris Cormack <chris@bigballofwax.co.nz> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |chris@bigballofwax.co.nz Status|Pushed to Master |Pushed to Stable --- Comment #10 from Chris Cormack <chris@bigballofwax.co.nz> --- Pushed to 3.18.x will be in 3.18.6 -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Tom Misilo <misilot@fit.edu> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |misilot@fit.edu -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |14034 -- You are receiving this mail because: You are watching all bug changes.
http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=12887 Martin Renvoize <martin.renvoize@ptfs-europe.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |14035 -- You are receiving this mail because: You are watching all bug changes.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org