[Koha-bugs] [Bug 6800] Koha authentication should handle proxies better

[bugzilla-daemon at bugs.koha-community.org]

http://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=6800

--- Comment #6 from Chris Cormack <chris at bigballofwax.co.nz> 2011-12-20 21:56:19 UTC ---
You can test this with curl also


curl -c cookies.txt -d
"userid=username&password=password&koha_login_context=intranet&submit=Login"
http://192.168.2.135:8080
curl -b cookies.txt http://192.168.2.135:8080

Still logged in

curl -H 'X-Forwarded-For: blah, blah2' -H 'Client-IP: blah' -b cookies.txt
http://192.168.2.135:8080

Still logged in

Change system preference

curl -H 'X-Forwarded-For: blah, blah2' -H 'Client-IP: blah' -b cookies.txt
http://192.168.2.135:8080

Not logged

Log in again

curl -c cookies.txt -d
"userid=username&password=password&koha_login_context=intranet&submit=Login"
http://192.168.2.135:8080

curl -H 'X-Forwarded-For: 192.168.2.135' -b cookies.txt
http://192.168.2.135:8080

Still logged in.

-- 
Configure bugmail: http://bugs.koha-community.org/bugzilla3/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA Contact for the bug.
You are watching all bug changes.