From ce96710cbbe41ebee5ff2a2977a3c694e44f2abc Mon Sep 17 00:00:00 2001 From: Marcel de Rooy Date: Thu, 17 Mar 2022 09:21:46 +0000 Subject: [PATCH] Bug 29957: Let check_api_auth return created cookie Content-Type: text/plain; charset=utf-8 The cookie created on L1496 is useless, since it is not returned. We could either remove the cookie creation (unchanged behavior). But since check_api_auth is expected to return a cookie when it is ok, I opt for returning the cookie here (corrected behavior). Test plan: Logout in staff. Check on staff: /cgi-bin/koha/svc/localization?id=1 You should have a 400 response. Login with staff credentials (incl. manage_itemtypes) Revisit same URL. You should see a JSON response. Check if you can hit other staff pages. Signed-off-by: Marcel de Rooy --- C4/Auth.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/C4/Auth.pm b/C4/Auth.pm index d5ee7d9573..a1c301c558 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -1499,7 +1499,7 @@ sub check_api_auth { -HttpOnly => 1, -secure => ( C4::Context->https_enabled() ? 1 : 0 ), ); - return ( $return, undef, $session ); + return ( $return, $cookie, $session ); # return == 'ok' here } else { -- 2.20.1