https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=38327

--- Comment #13 from David Cook <[email protected]> ---
(In reply to Jan Kissig from comment #11)
> On a pivate window I opened my bookmark to /cgi-bin/koha/mainpage.pl 
> it returned a cookie with CGISESSID 67cd...
> the fetch on document.ready to /cgi-bin/koha/svc/report?id=9 used this
> cookie (67cd...) in the request but got a new CGISESSID 0bc5...

My apologies, after re-reading your comment, I see you said that your AJAX
request *did* send the original cookie to /cgi-bin/koha/svc/report?id=9 but
that it got a different one back. 

So your login is for the staff interface... are you calling the report endpoint
for the staff interface or the OPAC? 

I note that /cgi-bin/koha/svc/report doesn't return a cookie on a succesful
request, but I do see that the staff interface version does do a
get_template_and_user() check on /cgi-bin/koha/svc/report which... is not the
right thing to do at all for that endpoint, as I suspect it is failing the auth
check and serving you back with a HTML response instead of a JSON response.
Ugh.

--

(In reply to Jan Kissig from comment #10)
> I solved it by only sending the fetch if the login was successful

Check out bug 37056. It looks like it's fixed in newer versions.

Anyway, we've distracted away from Lucas's other bug here...

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to