Bug 37318 - Connexion Client cannot authenticate due to CSRF
Summary: Connexion Client cannot authenticate due to CSRF
Status: RESOLVED DUPLICATE of bug 37543
Alias: None
Product: Koha
Classification: Unclassified
Component: Tools (show other bugs)
Version: 24.05
Hardware: All All
: P5 - low normal
Assignee: Bugs List
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-07-10 20:27 UTC by Liz Rea
Modified: 2024-08-07 18:55 UTC (History)
5 users (show)

See Also:
Change sponsored?: ---
Patch complexity: Small patch
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 37318: Use svc/authentication for Connexion daemon (1.86 KB, patch)
2024-07-31 17:56 UTC, Eric Garcia
Details | Diff | Splinter Review
Bug 37318: Use svc/authentication for Connexion daemon (2.27 KB, patch)
2024-07-31 18:08 UTC, Eric Garcia
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Liz Rea 2024-07-10 20:27:21 UTC
The Connexion client is a little tcp daemon that listens for very specific strings and takes the MARC it receives and authenticates locally to Koha - that login is being blocked by an invalid CSRF response, leading to librarians being unable to use the connexion desktop app to export records to Koha.

A workaround is to export the records from connexion desktop, and import them using staged marc records.
Comment 1 Katrin Fischer 2024-07-11 08:37:26 UTC
IIRC it uses the "old" svc scripts for updating/adding records to Koha, is that correct? In this case bug 36094 and bug 36194 might be related.
Comment 2 Dani Elder 2024-07-25 19:12:23 UTC
We are primarily users of Record Manager in the browser.   Hope this can be fixed.
Comment 3 Eric Garcia 2024-07-31 17:56:46 UTC
Created attachment 169908 [details] [review]
Bug 37318: Use svc/authentication for Connexion daemon
Comment 4 Eric Garcia 2024-07-31 18:08:27 UTC
Created attachment 169909 [details] [review]
Bug 37318: Use svc/authentication for Connexion daemon
Comment 5 Nick Clemens (kidclamp) 2024-08-07 18:48:43 UTC

*** This bug has been marked as a duplicate of bug 37543 ***