Files
zoneminder/web/api/app
Isaac ConnorandClaude Opus 5.5 93f1ad29ae fix: store the session issued by a stateful legacy API login
712994b19 stopped writing sessions for requests that arrive without a
ZMSESSID cookie unless zm_session_persist() marks them as being issued.
Web login goes through zm_session_regenerate_id_login(), which marks the
session, but the legacy API login with stateful=1 authenticates via
validateUser() and only calls zm_session_start(). A client logging in that
way without a cookie was handed a ZMSESSID cookie for a session that was
never stored, so its following cookie-only requests were unauthenticated.

Mark the session persistent once the stateful login has a user.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-09-28 19:03:05 -04:00
..
2023-02-01 14:34:05 -05:00
2023-11-03 13:33:28 -04:00
2021-03-31 12:11:12 -04:00
2021-03-31 12:11:12 -04:00