Bug 40980 - Clicking a search facet without logging in may trigger a cud-login error
Summary: Clicking a search facet without logging in may trigger a cud-login error
Status: Needs Signoff
Alias: None
Product: Koha
Classification: Unclassified
Component: Searching - Elasticsearch (show other bugs)
Version: Main
Hardware: All All
: P5 - low normal
Assignee: Pedro Amorim
QA Contact: Testopia
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-10-09 08:29 UTC by Pedro Amorim
Modified: 2025-10-09 08:33 UTC (History)
4 users (show)

See Also:
GIT URL:
Change sponsored?: ---
Patch complexity: ---
Documentation contact:
Documentation submission:
Text to go in the release notes:
Version(s) released in:
Circulation function:


Attachments
Bug 40980: Only consider AND|OR|NOT/i operators (1.43 KB, patch)
2025-10-09 08:33 UTC, Pedro Amorim
Details | Diff | Splinter Review

Note You need to log in before you can comment on or make changes to this bug.
Description Pedro Amorim 2025-10-09 08:29:31 UTC

    
Comment 1 Pedro Amorim 2025-10-09 08:33:08 UTC
Created attachment 187634 [details] [review]
Bug 40980: Only consider AND|OR|NOT/i operators

Test plan, k-t-d with elastic search:
1) Make sure you're logged out
2) Access a search results page directly e.g.:
http://localhost:8081/cgi-bin/koha/catalogue/search.pl?q=music
3) You're prompted to login, login.
4) You're shown the search results directly, click a facet result (any facet)
5) You get a Error 403:
Programming error - op 'cud-login' must not start with 'cud-' for GET
6) Apply patch, restart plack, repeat