Back to bug 36084

Who When What Removed Added
jonathan.druart 2024-02-13 14:26:31 UTC Status ASSIGNED In Discussion
jonathan.druart 2024-02-13 15:23:07 UTC Depends on 35560 34478
jonathan.druart 2024-02-14 12:48:02 UTC Depends on 36094
jonathan.druart 2024-02-15 10:56:34 UTC Depends on 34478 36102
jonathan.druart 2024-02-15 10:58:06 UTC Status In Discussion ASSIGNED
jonathan.druart 2024-02-15 13:16:52 UTC Attachment #162108 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:53 UTC Attachment #162109 Attachment is obsolete 0 1
Attachment #162110 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:54 UTC Attachment #162111 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:55 UTC Attachment #162112 Attachment is obsolete 0 1
Attachment #162133 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:56 UTC Attachment #162147 Attachment is obsolete 0 1
jonathan.druart 2024-02-15 13:16:57 UTC Attachment #162150 Attachment is obsolete 0 1
jonathan.druart 2024-02-28 13:27:36 UTC Status ASSIGNED Passed QA
jonathan.druart 2024-02-28 14:13:42 UTC Comment 36 Tag important
jonathan.druart 2024-03-01 09:25:00 UTC Blocks 36211
jonathan.druart 2024-03-01 13:22:04 UTC Product Koha security Koha
QA Contact testopia
Component Koha Architecture, internals, and plumbing
Version(s) released in 24.05.00
Summary Pass CSRF token to SVC scripts Pass CSRF token to SVC scripts (1/2)
Status Passed QA Pushed to master
Group Koha security
jonathan.druart 2024-03-01 13:22:20 UTC Depends on 36094
jonathan.druart 2024-03-01 13:23:08 UTC Blocks 36194
jonathan.druart 2024-03-05 15:04:01 UTC Blocks 36234
jonathan.druart 2024-03-05 15:57:47 UTC Blocks 36235
jonathan.druart 2024-03-26 07:36:27 UTC Blocks 36426
fridolin.somers 2024-04-17 09:14:24 UTC Status Pushed to master RESOLVED
Resolution --- FIXED
dcook 2024-05-22 23:15:23 UTC See Also https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36094
dcook 2024-05-22 23:23:19 UTC Text to go in the release notes The /svc API now requires a CSRF token for stateful requests (i.e. POST/PUT/PATCH/DELETE). Third-party developers should consult the wiki documentation for updated workflows. CSRF tokens are available through the /svc/authentication endpoint.
emily.lamancusa 2024-06-11 20:49:07 UTC Blocks 36407
emily.lamancusa 2024-07-16 14:37:12 UTC Blocks 37332

Back to bug 36084