18177: Auth plugin can not update username for remote control

This issue affects 1 person(s).

ID	Project	Category	View Status	Date Submitted	Last Update
18177	Bug reports	Plugins	public	2022-06-06 16:53	2026-11-02 09:31

Reporter	DenisChenu	Assigned To	c_schmitz
Priority	low	Severity	minor
Status	resolved	Resolution	fixed
Product Version	3.28.x

Summary	18177: Auth plugin can not update username for remote control
Description	If web auth plugin can set username of new user, it's not the case of RC auth plugin
Steps To Reproduce	Steps to reproduce Import included plugin Create a token key (via User menu) Try to log with this token key Seems log in with success Use list survey : receive an empty list in any condition Expected result Receive the list of user Actual result receive an empty list
Tags	No tags attached.
Attached Files	AuthRemoteToken.zip (9,919 bytes)

Bug heat	6
Complete LimeSurvey version number (& build)	3.28.13 + 5.3.18
I will donate to the project if issue is resolved	No
Browser	not relevant
Database type & version	not relevant
Server OS (if known)	not relevant
Webserver software & version (if known)	not relevant
PHP Version	not relevant
Git branch / Pull Request URL	N/A

User List	There are no users monitoring this issue.

LimeSurvey: master 3168d9a0 2026-10-30 17:14 c_schmitz Details Diff	Fixed issue 18177: A RemoteControl login with the email address or through an auth plugin that changes the username returned a session key without any permissions Dev get_session_key() now uses the username set by the auth plugin's identity instead of the given login name	Affected Issues 18177
	mod - application/helpers/remotecontrol/remotecontrol_handle.php	Diff File
	mod - tests/unit/helpers/remotecontrol/GetSessionKeyTest.php	Diff File

Date Modified	Username	Field	Change
2022-06-06 16:53	DenisChenu	New Issue
2022-06-06 16:53	DenisChenu	File Added: AuthRemoteToken.zip
2022-06-06 16:55	DenisChenu	Note Added: 70253
2022-06-06 16:55	DenisChenu	Bug heat	0 => 2
2022-06-07 11:54	DenisChenu	Note Added: 70258
2022-06-08 23:45	gabrieljenik	Note Added: 70297
2022-06-08 23:45	gabrieljenik	Bug heat	2 => 4
2022-06-09 08:16	DenisChenu	Note Added: 70307
2022-07-05 17:46	DenisChenu	Status	new => confirmed
2022-07-05 17:46	DenisChenu	Note Added: 70747
2022-07-05 17:46	DenisChenu	Priority	none => low
2026-10-30 17:15	c_schmitz	Changeset attached	=> LimeSurvey master 3168d9a0
2026-10-30 17:15	c_schmitz	Note Added: 87031
2026-10-30 17:15	c_schmitz	Assigned To	=> c_schmitz
2026-10-30 17:15	c_schmitz	Status	confirmed => resolved
2026-10-30 17:15	c_schmitz	Resolution	open => fixed
2026-10-30 17:15	c_schmitz	Bug heat	4 => 6
2026-11-02 09:31	DenisChenu	Note Added: 87088

DenisChenu 2022-06-06 16:55 developer ~70253	Issue is here : https://github.com/LimeSurvey/LimeSurvey/blob/53780f36c2de526427db72d1361224f532e0eb2d/application/helpers/remotecontrol/remotecontrol_handle.php#L53 It get the usernme from param not this one from identity. Same in 3.X

DenisChenu 2022-06-07 11:54 developer ~70258	Extend remotecontrol_handle and usage of another solution is a current workaround. https://gitlab.com/SondagesPro/Authentification/AuthRemoteToken/-/blob/main/RemoteControlHandler.php#L32

gabrieljenik 2022-06-08 23:45 developer ~70297	I believe I see the fix for 5.x

DenisChenu 2022-06-09 08:16 developer ~70307	Not in develop https://github.com/LimeSurvey/LimeSurvey/blob/396938a2ce8698075393b2ccd1e2a74c3ceb4585/application/helpers/remotecontrol/remotecontrol_handle.php#L53 https://github.com/LimeSurvey/LimeSurvey/blob/396938a2ce8698075393b2ccd1e2a74c3ceb4585/application/helpers/remotecontrol/remotecontrol_handle.php#L3364

DenisChenu 2022-07-05 17:46 developer ~70747	See workaround : https://gitlab.com/SondagesPro/Authentification/AuthRemoteToken

c_schmitz 2026-10-30 17:15 administrator ~87031	Fix committed to master branch: http://bugs.limesurvey.org/plugin.php?page=Source/view&id=41182

DenisChenu 2026-11-02 09:31 developer ~87088	Hope the worlaround still working :(