{"action":"closed","issue":{"url":"https://api.github.com/repos/owncloud/core/issues/23846","repository_url":"https://api.github.com/repos/owncloud/core","labels_url":"https://api.github.com/repos/owncloud/core/issues/23846/labels{/name}","comments_url":"https://api.github.com/repos/owncloud/core/issues/23846/comments","events_url":"https://api.github.com/repos/owncloud/core/issues/23846/events","html_url":"https://github.com/owncloud/core/issues/23846","id":146653217,"number":23846,"title":"Automatically login from other site: requesttoken needed","user":{"login":"tobiasKaminsky","id":5836855,"avatar_url":"https://avatars.githubusercontent.com/u/5836855?v=3","gravatar_id":"","url":"https://api.github.com/users/tobiasKaminsky","html_url":"https://github.com/tobiasKaminsky","followers_url":"https://api.github.com/users/tobiasKaminsky/followers","following_url":"https://api.github.com/users/tobiasKaminsky/following{/other_user}","gists_url":"https://api.github.com/users/tobiasKaminsky/gists{/gist_id}","starred_url":"https://api.github.com/users/tobiasKaminsky/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tobiasKaminsky/subscriptions","organizations_url":"https://api.github.com/users/tobiasKaminsky/orgs","repos_url":"https://api.github.com/users/tobiasKaminsky/repos","events_url":"https://api.github.com/users/tobiasKaminsky/events{/privacy}","received_events_url":"https://api.github.com/users/tobiasKaminsky/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-04-07T15:06:23Z","updated_at":"2016-04-08T16:03:54Z","closed_at":"2016-04-08T16:03:54Z","body":"### Expected behaviour\r\nWith given username and password via post it should be possible to directly login.\r\n\r\n### Steps to reproduce\r\n1. Use a page where an user is authenticated. Username/password is the same due owncloud already gets these credentials via user_sql addon.\r\n2. Click on a link to ownloud while logged in the other system.\r\n3. Opens owncloud in new window, without entering the same credentials.\r\n\r\n### Actual behaviour\r\nNot working due to requesttoken is needed.\r\nWorkaround: modify passesCSRFCheck() to return always true in ./lib/private/appframework/http/request.php\r\n\r\nI suppose the requesttoken is there for security reasons and should not be disabled, so I am searching for a way to avoid this.\r\n\r\n### Server configuration\r\n**Operating system**: Linux\r\n\r\n**Web server:** Apache\r\n\r\n**Database:** MySQL\r\n\r\n**PHP version:**\r\n\r\n**ownCloud version:** (see ownCloud admin page)\r\n8.0"}}