[Tickets #9311] Re: Impossible for guest users to utilize session storage

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/9311
------------------------------------------------------------------------------
  Ticket             | 9311
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Impossible for guest users to utilize session storage
  Queue              | Horde Base
  Version            | Git master
  Type               | Bug
  State              | Feedback
  Priority           | 3. High
  Milestone          | 4.0
  Patch              |
  Owners             | Horde Developers, Michael Slusarz
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2010-11-16 02:47) wrote:

Methinks this latest commit (along with IMP changes) should fix  
things.  The key is that application's auth code should NOT set any  
session variables in its authenticate/transparent functions.  Session  
storage should only be done in the post-auth callback.  This allows us  
to reset the session only if transparent authentication is successful.