From 78414f6c628f7ca8a29686b2f6c489a602a38f07 Mon Sep 17 00:00:00 2001
From: John Duggan <dugganjw@ornl.gov>
Date: Wed, 29 Oct 2025 13:40:49 -0400
Subject: [PATCH 1/2] Force the user to logout before authenticating with a new
 provider

---
 lib/galaxy/authnz/managers.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/lib/galaxy/authnz/managers.py b/lib/galaxy/authnz/managers.py
index 117258dafa..b80e6385d6 100644
--- a/lib/galaxy/authnz/managers.py
+++ b/lib/galaxy/authnz/managers.py
@@ -333,6 +333,8 @@ class AuthnzManager:
             success, message, backend = self._get_authnz_backend(provider, idphint=idphint)
             if success is False:
                 return False, message, None
+            if trans.user:
+                trans.handle_user_logout(logout_all=True)
             elif provider in KEYCLOAK_BACKENDS:
                 if self.allowed_idps and (idphint not in self.allowed_idps):
                     msg = f"An error occurred when authenticating a user. Invalid EntityID: `{idphint}`"
-- 
GitLab


From 72a091da5ddafaad3a13c118e7eacc6347f703e2 Mon Sep 17 00:00:00 2001
From: John Duggan <dugganjw@ornl.gov>
Date: Thu, 30 Oct 2025 10:35:24 -0400
Subject: [PATCH 2/2] Bump Galaxy version

---
 .gitlab-ci.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index faa4f5158d..d5a36c3ecb 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -9,8 +9,8 @@ variables:
   CONTAINER_GALAXY_URL: "${NDIP_DOCKER_REPOSITORY}/${CI_PROJECT_PATH}"
   CONTAINER_GALAXY_BASE_URL: "${CONTAINER_GALAXY_URL}/base"
   CONTAINER_GALAXY_COMMIT_URL: "${CONTAINER_GALAXY_URL}/commit"
-  GALAXY_VERSION_PYTHON: 24.2.dev7+ornl
-  GALAXY_VERSION_DOCKER: 24.2.dev7.ornl
+  GALAXY_VERSION_PYTHON: 24.2.dev8+ornl
+  GALAXY_VERSION_DOCKER: 24.2.dev8.ornl
 
 # This import is for the func_rse_docker_* functions
 before_script:
-- 
GitLab