Bug 40224 - Replace use of location.href with POST logout form
Summary: Replace use of location.href with POST logout form
Status: NEW
Alias: None
Product: Koha
Classification: Unclassified
Component: Self checkout (show other bugs)
Version: unspecified
Hardware: All All
: P5 - low enhancement
Assignee: Kyle M Hall (khall)
QA Contact: Testopia
URL:
Keywords:
Depends on: 36586
Blocks:
  Show dependency treegraph
 
Reported: 2025-06-24 11:26 UTC by Kyle M Hall (khall)
Modified: 2025-06-25 11:30 UTC (History)
1 user (show)

See Also:
GIT URL:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 40224: Replace use of location.href with POST logout form (6.39 KB, patch)
2025-06-24 11:30 UTC, Kyle M Hall (khall)
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Kyle M Hall (khall) 2025-06-24 11:26:55 UTC
The self-check module should use use POST for logouts instead of GET.
Comment 1 Kyle M Hall (khall) 2025-06-24 11:30:11 UTC
Created attachment 183443 [details] [review]
Bug 40224: Replace use of location.href with POST logout form

The self-check module should use use POST for logouts instead of GET.

Test Plan:
1) Enable WebBasedSelfCheck and SelfCheckInModule
2) Set SelfCheckTimeout and SelfCheckInTimeout to 10 seconds
3) Log in to each, observer the page is logged out after 10 seconds
   with not "op=logout" in the URL. Wait another 10 seconds, observe the
   page again refreshes with no "op=logout" in the URL.
Comment 2 David Nind 2025-06-24 19:54:02 UTC
Just checking if this is ready for sign off yet.
Comment 3 Kyle M Hall (khall) 2025-06-25 11:30:13 UTC
I'm concerned about issues with Bug 36586