From 40aaa5105011daa74b6e77d73943c4a9c3b6db98 Mon Sep 17 00:00:00 2001 From: Hypolite Petovan Date: Sun, 24 Oct 2021 23:17:22 -0400 Subject: [PATCH] Skip session authentication for backend modules - This was causing errors accessing these modules with an existing session with 2fa enabled while anonymous calls were going through --- src/App.php | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/App.php b/src/App.php index 5c85c9f26d..3ef9bdb4ed 100644 --- a/src/App.php +++ b/src/App.php @@ -631,7 +631,9 @@ class App Model\Profile::openWebAuthInit($token); } - $auth->withSession($this); + if (!$this->mode->isBackend()) { + $auth->withSession($this); + } if (empty($_SESSION['authenticated'])) { header('X-Account-Management-Status: none');