Bugzilla – Attachment 159315 Details for
Bug 34893
ILS-DI can return the wrong patron for AuthenticatePatron
Home
|
New
|
Browse
|
Search
|
[?]
|
Reports
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
Bug 34893: Add checkpw change to REST API
Bug-34893-Add-checkpw-change-to-REST-API.patch (text/plain), 1.64 KB, created by
David Cook
on 2023-11-28 23:05:41 UTC
(
hide
)
Description:
Bug 34893: Add checkpw change to REST API
Filename:
MIME Type:
Creator:
David Cook
Created:
2023-11-28 23:05:41 UTC
Size:
1.64 KB
patch
obsolete
>From eb0b6f3056befedfa62e41b62f990805a50cb1a0 Mon Sep 17 00:00:00 2001 >From: David Cook <dcook@prosentient.com.au> >Date: Tue, 28 Nov 2023 22:57:39 +0000 >Subject: [PATCH] Bug 34893: Add checkpw change to REST API > >This patch adds the checkpw return value change to the REST API >route for validating user identifiers and password. > >Test plan: >0. Apply patch >1. prove t/db_dependent/api/v1/password_validation.t > >Bonus points: >1. koha-plack --reload kohadev >2. Enable syspref RESTBasicAuth >3. curl -XPOST -H "Content-Type: application/json" \ >-u <staff_userid>:<staff_password> \ >-d '{"identifier":"<cardnumber>","password":"<password>"}' \ >http://localhost:8081/api/v1/auth/password/validation >4. Validation doesn't fail. It gives you cardnumber, patron_id, userid >--- > Koha/REST/V1/Auth/Password.pm | 4 +--- > 1 file changed, 1 insertion(+), 3 deletions(-) > >diff --git a/Koha/REST/V1/Auth/Password.pm b/Koha/REST/V1/Auth/Password.pm >index 4369ffd187..a7e04a05b2 100644 >--- a/Koha/REST/V1/Auth/Password.pm >+++ b/Koha/REST/V1/Auth/Password.pm >@@ -71,7 +71,7 @@ sub validate { > my $password = $body->{password} // ""; > > return try { >- my ( $status, $THE_cardnumber, $THE_userid ) = C4::Auth::checkpw( $identifier, $password ); >+ my ( $status, $THE_cardnumber, $THE_userid, $patron ) = C4::Auth::checkpw( $identifier, $password ); > unless ($status) { > return $c->render( > status => 400, >@@ -79,8 +79,6 @@ sub validate { > ); > } > >- my $patron = Koha::Patrons->find( { cardnumber => $THE_cardnumber } ); >- > return $c->render( > status => 201, > openapi => { >-- >2.30.2
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
|
Splinter Review
Attachments on
bug 34893
:
156121
|
156123
|
159311
|
159314
|
159315
|
159356
|
159441
|
159506
|
159507
|
159508
|
159509
|
159797
|
159798
|
159799
|
159800
|
159893
|
161097
|
161098
|
161099
|
161100
|
161101
|
161324
|
163964