Florian Vranckx
authored
This commit fixes a change in behavior between 15.2 and 15.3. Previously, if an unidentified user tried to reach a route that had auth='user', it would simply redirect to the login page. Currently, it redirects and invalidates the session_id. This is an issue in the latest version of master after this PR https://github.com/odoo/enterprise/pull/36521 This commit changes the route of service-worker.js to auth='user'. This route is called on the login page, which rotates the sid and therefore invalidates the csrf token. Making it impossible for a user to log in. This is a race condition, meaning it would only appear if the user stayed on the login page for a few seconds, hence why the automated testing did not block the commit. closes odoo/odoo#112169 Signed-off-by:Julien Castiaux (juc) <juc@odoo.com> Co-authored-by:
Julien Castiaux <juc@odoo.com>
Name | Last commit | Last update |
---|