https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=40596

--- Comment #26 from Martin Renvoize (ashimema) 
<[email protected]> ---
Created attachment 195117
  -->
https://bugs.koha-community.org/bugzilla3/attachment.cgi?id=195117&action=edit
Bug 40596: Update C4::Auth to use CAS identity providers

Removes the syspref-driven $cas/$caslogout module globals and the
conditional loading of C4::Auth_with_cas from the BEGIN block.
C4::Auth_with_cas is now imported unconditionally.

CAS presence is detected at runtime from the identity_providers table
rather than from the casAuthentication system preference:

- The casAuthentication template variable is now set from a live DB
  count of enabled CAS providers.
- Login-page CAS URL rendering iterates over identity provider codes
  instead of Auth_cas_servers.yaml keys; the old ?cas= query parameter
  is replaced by the cas_provider= parameter embedded in the service URL.
- The ticket-validation condition in checkauth and checkpw checks for
  the cas_provider CGI parameter rather than the $cas global.
- cas_provider is stored in the user session alongside cas_ticket so
  logout_cas receives the correct provider code on sign-out.
- The forced-SSO redirect for CAS providers uses login_cas_url()
  directly with the provider's code.
- Proxy-ticket (PT) handling in check_api_auth no longer requires the
  casAuthentication syspref to be enabled.

-- 
You are receiving this mail because:
You are watching all bug changes.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to