You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Describe the bug
If a user visits /locallogin.php with an active local session and alternateloginurl is set in such a way, that /login/index.php makes a redirect to an identity provider, an active session actually prevents the user from continuing to the moodle system.
To Reproduce
Steps to reproduce the behavior:
Go to 'Site administration' -> 'Plugins' -> 'Authentication' -> 'Manage authentication'
Verify that authentication method 'Shibboleth' is active.
Verify that 'alternateloginurl' is set to '/auth/shibboleth/index.php'.
Go to 'Site administration' -> 'Plugins' -> 'Authentication' -> 'Shibboleth'
Verify that Shibboleth is configured properly and especially 'alt_login' (Moodle WAYF service) is set to 'No'.
Go to 'Site administration' -> 'Appearance' -> 'Boost Union' -> 'Look' -> 'Login Page'
Verify that 'loginlocalloginenable' is set to 'No'.
In a new browser window (no session), go to '/theme/boost_union/locallogin.php'
Login with a manual account.
Verify that you have a valid session (i.e. are logged into Moodle).
Go to '/theme/boost_union/locallogin.php'
You should be redirected to the IdP of your Shibboleth configuration.
Expected behavior
The expected behaviour is for the user to be redirected to the appropriate starting page for a user with a valid session. This is done via /index.php, not /login/index.php.
Screenshots
n/a
Desktop (please complete the following information):
OS: irrelevant
Browser: irrelevant
Version: irrelevant
Smartphone (please complete the following information):
Device: irrelevant
OS: irrelevant
Browser irrelevant
Version irrelevant
Additional context
This feature is not a core feature of Boost Union, yet very useful for sites where a single IdP is used via the auth plugins login page in alternateloginurl. Still, this combination of circumstances creates unexpected behaviour and thus qualifies as a bug. (imho)
The text was updated successfully, but these errors were encountered:
krostas1983
added
the
new
Something which has been reported but has not yet beeen triaged by the team
label
Nov 27, 2024
unfortunately not the same. I think #653 needs some copy/paste from templates/core/loginform.mustache to add the button for guest login + JS to determine whether it should be active (i.e. if guest access is enabled or not). Haven't figured that out yet as I'm not very well versed in Mustache templates.
wiebkemueller-hsh
added
bug
Something which isn't working
and removed
new
Something which has been reported but has not yet beeen triaged by the team
labels
Dec 5, 2024
Describe the bug
If a user visits
/locallogin.php
with an active local session andalternateloginurl
is set in such a way, that/login/index.php
makes a redirect to an identity provider, an active session actually prevents the user from continuing to the moodle system.To Reproduce
Steps to reproduce the behavior:
Expected behavior
The expected behaviour is for the user to be redirected to the appropriate starting page for a user with a valid session. This is done via
/index.php
, not/login/index.php
.Screenshots
n/a
Desktop (please complete the following information):
Smartphone (please complete the following information):
Additional context
This feature is not a core feature of Boost Union, yet very useful for sites where a single IdP is used via the auth plugins login page in
alternateloginurl
. Still, this combination of circumstances creates unexpected behaviour and thus qualifies as a bug. (imho)The text was updated successfully, but these errors were encountered: