Bug 35601 - Cannot go into Cataloging->Export when 2FA is enabled
Summary: Cannot go into Cataloging->Export when 2FA is enabled
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Staff interface (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on: 20476
Blocks:
  Show dependency treegraph
 
Reported: 2023-12-19 11:02 UTC by Michał
Modified: 2024-11-15 10:48 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Michał 2023-12-19 11:02:41 UTC
After enabling 2FA authentication for a user, they cannot go into /cgi-bin/koha/tools/export.pl anymore (Cataloging -> Export catalog).

It prompts them to log-in again instantly, but putting in the email+password, and then 2FA code, it puts you back again into email+password prompt in an infinite loop, without any error.

If I then go back to the main page, if I was at the 2FA stage, I have to enter my 2FA code again to see the staff interface. If I was at the email+password stage, I can then proceed without logging in again.

This effectively makes catalog exporting page inaccessible.

I find the whole requirement of logging in again to export catalog pretty annoying on that note, which we do fairly regularly. Is there by any chance some way to disable that (which would probably mitigate this bug too)? I couldn't find anything.
Comment 1 Katrin Fischer 2023-12-19 11:09:17 UTC
I cannot replicate that and have been using 2FA for a while without issue. Did you check the correct permission was set for the user? (export_catalog)

I don't ever had to log in again to access that page. 

Is this about the feature you need to turn on that allows to export a databaes dump or just for the normal MARC export?
Comment 2 Michał 2023-12-19 11:22:01 UTC
Actually previously it'd prompt to re-login only on database dump feature, but now it does when I just try to open the export page (possibly a change in 23.11 vs 23.05?).

Disabling 2FA lets me access that page normally again though, after going through a single login.

> Did you check the correct permission was set for the user?

I have superlibrarian permissions, so that shouldn't be an issue as far as I understand. I'm using the primary admin account that was created during Koha installation in this case
Comment 3 Michał 2023-12-19 11:22:40 UTC
But yes, we have that database dumps feature enabled and are using it (both SQL and config variants are on)
Comment 4 Katrin Fischer 2023-12-30 19:25:52 UTC
I think the database dump feature is the culprit here. Without it the page doesn't require an additional login. I believe we should indeed keep it for database dumps for security reasons, but allow the normal export to work normally.