Bug 34513: Set auth state correctly when changing auth sessions
authorDavid Cook <dcook@prosentient.com.au>
Fri, 11 Aug 2023 03:03:01 +0000 (03:03 +0000)
committerLucas Gass <lucas@bywatersolutions.com>
Thu, 28 Sep 2023 16:06:05 +0000 (16:06 +0000)
commitc98554d36698eb2480fdeb724e439b7d902fa915
tree405b1abf9f3e4dcb38e5fc744cd300996126e2fb
parentddb6f21b49d88022725b1dd0bedd4138af32a807
Bug 34513: Set auth state correctly when changing auth sessions

This patch sets the $auth_state to failed when changing auth sessions,
so that the new login attempt gets processed correctly (instead
of skipping the authorization step).

Test plan:
0. Apply the patch
1. koha-plack --reload kohadev
2. Go to
http://localhost:8081/cgi-bin/koha/admin/preferences.pl?tab=&op=search&searchfield=baseurl
3. Log in as an OPAC user with 0 permissions
4. Note the auth screen "Error: You do not have permission to access this page"
5. Click "Log in"
6. Note that you're still shown a login screen (and that you've been logged out of
your previous authenticated session)

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Lucas Gass <lucas@bywatersolutions.com>
C4/Auth.pm