From dd5384580d00f54046e23726e9567329a8ff71f4 Mon Sep 17 00:00:00 2001 From: Martin Renvoize Date: Thu, 27 Sep 2018 16:00:42 +0100 Subject: [PATCH] Bug 18506: (followup) Make this play nicely with opacPublic --- C4/Auth.pm | 17 +++++++++++++++++ .../bootstrap/en/includes/masthead.inc | 4 ++++ 2 files changed, 21 insertions(+) diff --git a/C4/Auth.pm b/C4/Auth.pm index d22ca0e729..e3c797a431 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -1064,6 +1064,23 @@ sub checkauth { } } + # If shib configured and shibOnly enabled, we should ignore anything other than a shibboleth type login. + if ( + $shib + && !$shibSuccess + && ( + ( + ( $type eq 'opac' ) + && C4::Context->preference('opacShibOnly') + ) + || ( ( $type ne 'opac' ) + && C4::Context->preference('staffShibOnly') ) + ) + ) + { + $return = 0; + } + # $return: 1 = valid user if ($return) { diff --git a/koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc b/koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc index 6de2d19e5c..5a986083ef 100644 --- a/koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc +++ b/koha-tmpl/opac-tmpl/bootstrap/en/includes/masthead.inc @@ -75,6 +75,8 @@ [% IF Koha.Preference('casAuthentication') %] [%# CAS authentication is too complicated for modal window %]
  • Log in to create your own lists
  • + [% ELSIF shibbolethAuthentication && Koha.Preference('opacShibOnly') %] +
  • Log in to create your own lists
  • [% ELSE %]
  • Log in to create your own lists
  • [% END %] @@ -99,6 +101,8 @@
  • [% ELSIF ( Koha.Preference('GoogleOpenIDConnect') == 1 ) %]
  • + [% ELSIF shibbolethAuthentication && Koha.Preference('opacShibOnly') %] +
  • [% ELSE %]
  • [% END %] -- 2.18.0