Skip to content

User session might be persisted #3848

@juliusknorr

Description

@juliusknorr

https://github.com/nextcloud/text/blob/main/lib/Controller/SessionController.php#L110 should get reset after controller method calls that make use of it as otherwise this may load to the current session getting updated with a different user.

I've seen this happening locally with:

  • tab 1: Having a tab open with a text editor
  • tab 2: Logout in a second tab
  • tab 2: Login as a different user
  • tab 2: Navigate to another page
  • tab 2: See that you're logged in as the previous user

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    Status

    ☑️ Done

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions