mrcharles 35bd13de8b glpi: REST auth recipe (app_token + encrypted-at-rest trap), SSO script known-issue ...

GLPI 11 encrypts api/app tokens at rest and decrypts before comparing;
the DB ciphertext never authenticates. Document the working
initSession?user_token+app_token recipe, per-user token minting via
GLPIKey, REST account provisioning, and the singlesignon plugin
callback breakage.

https://projects.knownelement.com/issues/947#note-5519

2026-09-09 22:43:28 -05:00

..

references

incident-log: pwvault web-vault EncString crash case (2026-09-09)

2026-09-09 18:59:11 -05:00

scripts

glpi: REST auth recipe (app_token + encrypted-at-rest trap), SSO script known-issue

2026-09-09 22:43:28 -05:00

SKILL.md

glpi: REST auth recipe (app_token + encrypted-at-rest trap), SSO script known-issue

2026-09-09 22:43:28 -05:00