[Bug 43655] New: Authentication by identity provider does not create entry in action_logs
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43655 Bug ID: 43655 Summary: Authentication by identity provider does not create entry in action_logs Initiative type: --- Sponsorship --- status: Product: Koha Version: 24.11 Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Transaction logs Assignee: koha-bugs@lists.koha-community.org Reporter: david_liddle@sil.org QA Contact: testopia@bugs.koha-community.org Target Milestone: --- When using external authentication, specifically a Google OpenID Connect configuration or the same service set up as an OIDC Identity Provider, no entry is added to action_logs when a patron or staff member logs in through the service. For security, auditing, and troubleshooting purposes, the action logs should include such entries. Ideally, the log would identify which authentication method was used, distinguishing between local and external. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43655 --- Comment #1 from David Liddle <david_liddle@sil.org> --- To get a head start on not missing logins from staff and patrons, I created a plugin with the help of Google Gemini and Cursor that achieves this: https://github.com/DFLiddle/koha-plugin-oidc-authentication-logger It's published with a GPLv3 license, which I think leaves anyone free to take what may be useful in the plugin to write a patch that adds this function natively to the appropriate Koha module(s). I know better than to propose a patch that was generated with nothing more than AI. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.
participants (1)
-
bugzilla-daemon@bugs.koha-community.org