Koha-clms/Koha/REST/V1
Tomas Cohen Arazi 154a2ea9ad
Bug 36420: Allow Basic authentication using `cardnumber`
This patch makes the API Basic authentication work with cardnumbers.
The used `checkpw_internal` method already does the fallback check.

To test:
1. Apply the unit tests patch
2. Run:
   $ ktd --shell
  k$ prove t/db_dependent/api/v1/auth_basic.t
=> FAIL: Tests explode! [1]
3. Apply this patch
4. Repeat 2
=> SUCCESS: Tests pass!
5. Sign off :-D

[1] This highlights an underlying bug! Instead of getting 403, etc we get a 500. This is because of the internal fallback mechanism allowing the cardnumber+password combination, but then the Koha::Patron->find... not finding :-D

Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Kyle M Hall <kyle@bywatersolutions.com>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Martin Renvoize <martin.renvoize@ptfs-europe.com>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
2024-04-18 16:51:14 +02:00
..
Acquisitions Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Auth Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Biblios Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
CashRegisters Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Clubs Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Config/SMTP Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
ERM Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
OAuth Bug 36219: Re-add missing state param for Oauth/OIDC client 2024-03-04 14:50:41 +01:00
Patrons Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Preservation Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
AdvancedEditorMacro.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
ArticleRequests.pm Bug 33556: Avoid relying on $c->validation 2023-07-21 17:14:37 -03:00
Auth.pm Bug 36420: Allow Basic authentication using `cardnumber` 2024-04-18 16:51:14 +02:00
AuthorisedValueCategories.pm Bug 32997: Add REST API endpoint to list authorised values for multiple given categories 2023-03-02 12:00:15 -03:00
AuthorisedValues.pm Bug 33556: Avoid relying on $c->validation 2023-07-21 17:14:37 -03:00
Authorities.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
BackgroundJobs.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Biblios.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Bookings.pm Bug 36100: (QA follow-up) Move 400 to 409 2024-03-07 16:36:42 +01:00
Checkouts.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
CirculationRules.pm
…
Cities.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
ERM.pm Bug 33606: (QA follow-up) Cosmetic changes 2023-07-06 12:24:15 -03:00
Holds.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Illbackends.pm Bug 34431: Allow for x-koha-embed in ill/backends endpoint 2024-03-22 15:07:33 +01:00
IllbatchStatuses.pm Bug 30719: (QA follow-up) Rename illbatchstatuses 2023-10-17 14:45:22 -03:00
Illbatches.pm Bug 30719: (QA follow-up) Pick better column names and cleanup 2023-10-17 14:45:23 -03:00
Illrequests.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
ImportBatchProfiles.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
ImportRecordMatches.pm Bug 33556: Avoid relying on $c->validation 2023-07-21 17:14:37 -03:00
ItemTypes.pm Bug 34008: (QA follow-up) 'item_type_id' should be used 2023-11-01 17:23:15 -03:00
Items.pm Bug 35963: Fix bundled items table ordering and filtering 2024-03-07 15:02:51 +01:00
Libraries.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
OAuth.pm Bug 33556: Avoid relying on $c->validation 2023-07-21 17:14:37 -03:00
Patrons.pm Bug 36483: Patrons.pm use case 2024-04-12 12:12:32 +02:00
Preservation.pm Bug 30708: Tidy perl files 2023-10-18 15:42:04 -03:00
Quotes.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
ReturnClaims.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
SearchFilter.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Stage.pm Bug 33556: Avoid relying on $c->validation 2023-07-21 17:14:37 -03:00
Static.pm
…
Suggestions.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
Tickets.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
TransferLimits.pm Bug 36483: Make API controllers use $c->objects->to_api 2024-04-12 12:12:31 +02:00
TwoFactorAuth.pm Bug 30843: Add mfa_range configuration option for TOTP 2023-09-25 10:53:51 -03:00