[2.2.0] Checkmk Werk 16222 created: Automationuser login must not open full session

Title: Automationuser login must not open full session Class: fix Compatible: incomp Component: wato Date: 1700382222 Edition: cre Level: 1 Version: 2.2.0p16 Checkmk offers a method to authenticate single web requests with URL parameters (<tt>_username</tt> and <tt>_secret</tt>). Due to some refactoring of the session handling with Checkmk 2.2 such automation requests initiated a full session. The login for automation users was still blocked in the login screen but an authenticated request initiated a full session that could than be used to browse the Checkmk GUI like a regular user. With this Werk that is no longer the case. If you use this authentication method you should check if you rely on sessions for your automation users.