September 2024 - Koha-devel - lists.koha-community.org

Discussion around Koha ILS-DI endpoints expecting a CSRF token from third-party integrations
by Alex Buckley 22 Oct '24

22 Oct '24

Kia ora koutou/Hello everyone, We have several Koha integrations that require third-party systems to call Koha ILS-DI endpoints. For example, Bolinda (BorrowBox) which calls the GetPatronInfo ILS-DI endpoint for authenticating users. Or the EBSCO EDS integration, which can use Koha ILS-DI endpoints for fetching RTAC (Real-Time Availability Check) data - alternatively, it can also integrate via Koha Z39.50. Since Koha 24.05, ILS-DI requests for these integrations do not work, because the Koha CSRF.pm <https://git.koha-community.org/Koha-community/Koha/src/branch/main/Koha/Mid…> file expects a CSRF token for all stateful methods (POST, PUT, DELETE, PATCH requests), including ILS-DI endpoints. As ILS-DI is designed to be used cross site, we would be interested to hear the communities thoughts on what could, or should, be done to get ILS-DI requests from third-party systems working again - given these integrations do not pass through CSRF tokens. To that end we have logged a bug report for having this conversation: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=37899 I will also link this bug report from the community Mattermost Development channel. We would be interested to hear your thoughts on the bug report. Thanks so much, as always, Alex

3 5

Koha Community Newsletter: September 2024
by Koha Newsletter 28 Sep '24

28 Sep '24

The Koha Community Newsletter for September 2024 is here: https://koha-community.org/koha-community-newsletter-september-2024/ Many thanks to everyone who submitted articles and news to this newsletter! Please feel free to email me (kohanews(a)gmail.com) with any corrections or suggestions. Michael Kuhn Editor, Koha Community Newsletter

1 0

Call for news - Newsletter September 2024
by Koha Newsletter 13 Sep '24

13 Sep '24

Hi I'm collecting news for the September 2024 Koha Community Newsletter. Please send anything noteworthy to: kohanews (at) gmail (dot) com News criteria: * Relevant news items can be of any length. * Images are fine. * Anything and everything Koha. * Submit by the 26th of the month. Text format criteria: * Just structured plain text, or * HTML text to include tables or similar For events: * Consider adding your event to the Koha Community calendar at https://koha-community.org/calendar/ Thank you! Michael Kuhn Editor, Koha Community Newsletter

1 0

REMINDER: Development Jitsi meeting 11 September 2024
by Paul Derscheid 10 Sep '24

10 Sep '24

Hi all, We have a Development Jitsi meeting scheduled for tomorrow: https://wiki.koha-community.org/wiki/Development_IRC_meeting_11_September_2… Time converter: https://www.timeanddate.com/worldclock/fixedtime.html?msg=Koha+Developers+M… Please feel free to add any topics you’d like to discuss to the agenda or let me know and I am happy to add them for you. If you are lead or supporter of a roadmap project, we will be happy to get an update on progress. See you there! Paul

1 0

Hackfest 2025 in Marseille
by Paul Poulain 04 Sep '24

04 Sep '24

Hello, I'm working on a 2025 plan, and may schedule the Koha hackfest in Marseille on March 31st - April 4th. Is there something that could cause trouble ? Happy Tuesday ! -- Paul Poulain, Associé-gérant / co-owner BibLibre, Services en logiciels libres pour les bibliothèques BibLibre, Open Source software and services for libraries

3 2