https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36934

--- Comment #1 from Nick Clemens (kidclamp) <[email protected]> ---
I think I see the issue - we aren't getting a sessionID after the failure:

1224                             if ( $ip !~ /^$domain/ ) {
1225                                 $cookie = $cookie_mgr->replace_in_list(
$cookie, $query->cookie(
1226                                     -name     => 'CGISESSID',
1227                                     -value    => '',
1228                                     -HttpOnly => 1,
1229                                     -secure => (
C4::Context->https_enabled() ? 1 : 0 ),
1230                                     -sameSite => 'Lax',
1231                                 ));
1232                                 $info{'wrongip'} = 1;
1233                                 $auth_state = "failed";
1234                             }

This correctly clears (without it I can log in to any branch on subsequent try)
but does not create a new session ID, not sure how to fix this one

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to