Bug 37388

Summary: Login to staff fails with incorrect csrf token when using plack
Product: Koha Reporter: Nicholas van Oudtshoorn <vanoudt>
Component: AuthenticationAssignee: Bugs List <koha-bugs>
Status: CLOSED WORKSFORME QA Contact: Testopia <testopia>
Severity: critical    
Priority: P5 - low CC: dpavlin, martin.renvoize
Version: 24.05   
Hardware: All   
OS: All   
GIT URL: Initiative type: ---
Sponsorship status: --- Comma delimited list of Sponsors:
Crowdfunding goal: 0 Crowdfunding committed: 0
Crowdfunding contact: Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:

Description Nicholas van Oudtshoorn 2024-07-17 08:39:20 UTC
We've just migrated our installation to a new server, and updated to 24.05 while we're at it. I notice now that staff logins always fail, complaining about the csrf token, unless plack is disabled on the staff interface.

Happy to help figure this out - but am a bit lost on where this is being set etc.
Comment 1 Katrin Fischer 2024-07-17 08:48:24 UTC
Hi, please bring this up on the mailing list or better even on the Mattermost chat. We have quite some libraries using 24.05 already and staff logins don't seem to be compromised in general, so I think this is more of a support request for now until we know more.