Bug 36564 - Koha staff interface logs out on homepage refresh with 2FA enforced
Summary: Koha staff interface logs out on homepage refresh with 2FA enforced
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Staff interface (show other bugs)
Version: 22.11
Hardware: All All
: P5 - low trivial
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on: 20476
Blocks:
  Show dependency treegraph
 
Reported: 2024-04-10 08:02 UTC by Chris Rowlands
Modified: 2024-11-15 10:51 UTC (History)
2 users (show)

See Also:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Chris Rowlands 2024-04-10 08:02:44 UTC
Koha will log the staff user out if they refresh the homepage and confirm form resubmission after logging in with 2FA enforced.

To reproduce:

1) ensure TwoFactorAuthentication is set to "Enforce"
2) log into staff interface including two factor code
3) refresh the homepage and confirm dialogue box for confirm form resubmission

This logs you out. However if you navigate to another page and back a refresh functions normally; also if you don't have 2FA enabled a refresh functions normally.

I've not submitted a bug before so please let me know if I've submitted this poorly/incorrectly.