| ID | Product | Comp | Assignee▲ | Status▲ | Resolution | Summary | Changed | 
|---|---|---|---|---|---|---|---|
| 29914 | Koha | Architec | jonathan.druart | RESOLVED | FIXE | check_cookie_auth not strict enough | 2025-06-23 | 
| 28785 | Koha | Architec | jonathan.druart | CLOSED | FIXE | Code in C4::Auth::checkauth is copy pasted | 2022-12-12 | 
| 28786 | Koha | Authenti | jonathan.druart | CLOSED | FIXE | Two-factor authentication for staff client - TOTP | 2024-07-04 | 
| 28787 | Koha | Authenti | jonathan.druart | CLOSED | FIXE | Send a notice with the TOTP token | 2023-12-28 | 
| 29915 | Koha | Authenti | jonathan.druart | CLOSED | FIXE | Anonymous session generates 1 new session ID per hit | 2023-06-17 | 
| 30588 | Koha | Authenti | jonathan.druart | CLOSED | FIXE | Add the option to require 2FA setup on first staff login | 2023-12-28 | 
| 31244 | Koha | Staff in | koha-bugs | CLOSED | FIXE | Logout when not logged in raise a 500 | 2024-12-23 | 
| 29957 | Koha | Architec | m.de.rooy | CLOSED | FIXE | Cookies not removed after logout | 2025-02-26 |