Skip to content
Snippets Groups Projects
user avatar
Florian Vranckx authored
This commit fixes a change in behavior between 15.2 and 15.3.

Previously, if an unidentified user tried to reach a route that had auth='user', it would simply redirect to the login page.

Currently, it redirects and invalidates the session_id.

This is an issue in the latest version of master after this PR https://github.com/odoo/enterprise/pull/36521


This commit changes the route of service-worker.js to auth='user'.

This route is called on the login page, which rotates the sid and therefore invalidates the csrf token. Making it impossible for a user to log in.

This is a race condition, meaning it would only appear if the user stayed on the login page for a few seconds, hence why the automated testing did not block the commit.

closes odoo/odoo#112169

Signed-off-by: default avatarJulien Castiaux (juc) <juc@odoo.com>
Co-authored-by: default avatarJulien Castiaux <juc@odoo.com>
d5d80d17
History
Name Last commit Last update