Bug 38022

Summary: Identity Provider error 500 on /api
Product: Koha Reporter: Aditya Sethi <adifbbk1>
Component: AuthenticationAssignee: Bugs List <koha-bugs>
Status: UNCONFIRMED --- QA Contact: Testopia <testopia>
Severity: minor    
Priority: P3 CC: dcook, dpavlin
Version: 23.11   
Hardware: All   
OS: All   
URL: <baseurl>/api/v1/public/oauth/login/<code>/opac
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:
Attachments: Screenshot of the bug

Description Aditya Sethi 2024-09-27 08:13:08 UTC
Created attachment 172100 [details]
Screenshot of the bug

There are 2 bugs to report. One, which already seems to be reported is, empty fields while editing identity provider in 24.05+ (main reason why koha was not updated and we sticked to stable 23.11)

Another bug is related to opening IDP API URL directly in browser such as <baseurl>/api/v1/public/oauth/login/<code>/opac which returns the following result in fresh/incognito session with no stored cookies (as in 23.11.08):
{
  "errors": [
    {
      "message": "Internal Server Error.",
      "path": "/"
    }
  ],
  "status": 500
}

The expected behavior should be redirecting to IDP page (which actually works fine when there are stored browser cookies due to visiting koha homepage for the first time and then trying this link).
Comment 1 David Cook 2024-10-18 02:16:56 UTC
Please only report one bug per report. I don't know what you mean for that first bug in any case.

For the second, while this sounds a bit suboptimal, why would a user encounter this scenario? Surely in all cases they should be visiting a regular Koha webpage before being sent to the API endpoint for auth. 

Probably worth looking into, but sounds very low importance.