CKAN 2.11 Compatiblity

[twdbben]

I am working on upgrading to CKAN 2.11 (from 2.10) and am curious if anyone is using ckanext-security with CKAN 2.11.

Upon initial upgrade we are still able to login with ckanext-security but we are seeing an AttributeError: 'RedisSession' object has no attribute 'invalidate' error when attempting to logout.

I can provide more detail but first just wanted to get a sanity check on whether we should expect ckanext-security to work with a CKAN 2.11 install generally.

Thank you!

[markstuart]

Hi Ben,

I've recently upgraded the site we maintain and use this extension in to 2.10.9, but have no immediate plans to update to 2.11 as there are a bunch of changes between 2.10 and 2.11 that affect other extensions used in that site as well, and I see that it is likely to be a large chunk of work.

If you have any luck upgrading this extension for your site, please raise a pull request with the changes and I'll try to get some time to test it against a base CKAN 2.11 site as well.

Cheers,
Mark

[twdbben]

Mark,

I'll let you know how it goes. So far, with the exception of the error I'm seeing when logging out, it seems to be mostly working - but I still need to do a lot of testing.

Thanks,
~Ben

[valentinmirchev]

Hello!
First, thank you for raising this issue!

Could you please clarify whether there are plans to address this compatibility issue soon, or if there’s an existing workaround in the meantime? It would be really helpful to understand the current status and any anticipated timeline for a fix.

Thank you! 😊

[twdbben]

Hello! First, thank you for raising this issue!

Could you please clarify whether there are plans to address this compatibility issue soon, or if there’s an existing workaround in the meantime? It would be really helpful to understand the current status and any anticipated timeline for a fix.

Thank you! 😊

Valentin,

I cannot speak for the ckanext-security team, but since I opened this issue I can tell you that we made some minor changes to get the MFA component working on our fork of ckanext-security, but we are still testing and do not have a timeline for either putting this into production on our site or submitting a PR to this project.

We would like to do both of those things, but have many competing priorities right now.

Regarding what we have done, you can see the very minor code changes we made to get MFA working here.

We also made configuration changes in support of the switch from Beaker to Flask-Sessions as detailed in the 2.11 migrration notes. I'll be honest in saying that I don't know if the Beaker -> Flask-Session updates are relevant to ckanext-security or not, but the changes we made didn't break anything.

Hope this helps. If we make any further progress on this, I will post about it here.