https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=36536

CJ Lynce <[email protected]> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Assignee|[email protected] |[email protected]
                   |ity.org                     |g

--- Comment #2 from CJ Lynce <[email protected]> ---
Currently, the REST API 'patron login' is actually doing a verification of a
username and password to be sure they are correct (checkpw). This is only a
portion of the full authentication process in C4::Auth. 

Additionally, a 'verification' via API is not a full 'login' to Koha, but
rather a login to whatever application is using the API (in most cases). I can
see use cases when knowing when a patron is doing a full login to Koha versus
when they are being verified via an API call.

I agree that a larger rework may be needed for the lower level authentication
system to accept a variety of 'login' paths, but for the time being, adding an
update_lastseen option for the API is a very trivial addition for a big
benefit.

-- 
You are receiving this mail because:
You are watching all bug changes.
You are the assignee for the bug.
_______________________________________________
Koha-bugs mailing list
[email protected]
https://lists.koha-community.org/cgi-bin/mailman/listinfo/koha-bugs
website : http://www.koha-community.org/
git : http://git.koha-community.org/
bugs : http://bugs.koha-community.org/

Reply via email to