Bug 36514 - The "kick_out" in auth should return an anonymous session instead of no session
Summary: The "kick_out" in auth should return an anonymous session instead of no session
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Architecture, internals, and plumbing (show other bugs)
Version: Main
Hardware: All All
: P5 - low enhancement
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-04-04 03:39 UTC by David Cook
Modified: 2024-04-04 03:39 UTC (History)
0 users

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description David Cook 2024-04-04 03:39:22 UTC
At the moment, when we "kick_out" of the self-checkout or the self-checkin, we send a CGISESSID cookie with an empty value and force the web app to render opac-auth.tt 

However, this doesn't really make sense.

If the user just reloads the page again, they'll see the real template. 

And if you want to link to the self-registration from the self-checkout (say in a new tab), you'll want to see the real template instead of a login screen. 

--

In theory, it shouldn't be too hard to do this. We'll just want to create an anonymous session and return the actual requested template. 

This isn't a top priority for me at the moment, but I do have a library interested in this, so I might find myself working on this...