If user has no permissions assigned and tries to login, a redirect loop occours

[bmfmancini]

[bmfmancini]

[bmfmancini]

Bit more info

the issue happens on Firefox and Chrome
If the user has any permission at all there is no issue
Cookies have to be clear from the browser to be able to login to cacti again

Request header

{
"Request headers (405 B)": {
"headers": [
{
"name": "Accept",
"value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8"
},
{
"name": "Accept-Encoding",
"value": "gzip, deflate"
},
{
"name": "Accept-Language",
"value": "en-CA,en-US;q=0.7,en;q=0.3"
},
{
"name": "Connection",
"value": "keep-alive"
},
{
"name": "Cookie",
"value": "Cacti=sv0jkjqc43r4eg1mn3a8c5fdq2"
},
{
"name": "Host",
"value": "192.168.1.22"
},
{
"name": "Upgrade-Insecure-Requests",
"value": "1"
},
{
"name": "User-Agent",
"value": "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:84.0) Gecko/20100101 Firefox/84.0"
}
]
}
}

[TheWitness]

Those sneaky corner cases. Need to know the exact settings. Screen capture would be great.

[TheWitness]

Never mind. Animation was better.

[TheWitness]

Please test with the latest auth_login.php and report back.

[bmfmancini]

Will do

…

On Sat., Jan. 23, 2021, 11:42 TheWitness, ***@***.***> wrote: Please test with the latest auth_login.php and report back. — You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub <#4077 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADGEXTHHX5VF5V6ELN2XW3TS3L4A5ANCNFSM4WNZCSYA> .

[bmfmancini]

tested and working fine!