From 6df54a1205c67ed0d309fa8a1d113fd0163dd4db Mon Sep 17 00:00:00 2001
From: yflory <yann.flory@xwiki.com>
Date: Fri, 28 Mar 2025 10:34:08 +0100
Subject: [PATCH] Fix report with 2FA

---
 www/report/main.js | 7 ++++---
 1 file changed, 4 insertions(+), 3 deletions(-)

diff --git a/www/report/main.js b/www/report/main.js
index a1d805ac1..1525b8994 100644
--- a/www/report/main.js
+++ b/www/report/main.js
@@ -104,11 +104,12 @@ define([
     var hash;
 
     nThen(function (waitFor) {
-        // If this instance is configured to enforce MFA for all registered users,
-        // request the login block with no credential to check if it is protected.
         let done = waitFor();
         var parsed = Block.parseBlockHash(blockHash);
-        Util.getBlock(parsed.href, { }, waitFor((err, response) => {
+        var sessionToken = LocalStore.getSessionToken() || undefined;
+        Util.getBlock(parsed.href, {
+            bearer: sessionToken
+        }, waitFor((err, response) => {
             if (err) {
                 waitFor.abort();
                 return void UI.alert('Invalid user');