diff options
Diffstat (limited to 'relogin.cgi')
-rwxr-xr-x | relogin.cgi | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/relogin.cgi b/relogin.cgi index 6f0c970f1..c4aae8d0b 100755 --- a/relogin.cgi +++ b/relogin.cgi @@ -64,6 +64,9 @@ elsif ($action eq 'prepare-sudo') { -httponly => 1, %args); + # The user ID must not be set when generating the token, because + # that information will not be available when validating it. + local Bugzilla->user->{userid} = 0; $vars->{'login_request_token'} = issue_hash_token(['login_request', $value]); } |