SonalPawar2509 / typescriptLearning

0 stars 0 forks source link

Session Cookie is not getting expired when user logs out from the device. #1

Open SonalPawar2509 opened 1 week ago

SonalPawar2509 commented 1 week ago

Preconditions:

  1. Create a user account and login to Freecash account in incognito tab
  2. Copy graphql request from the network tab for login and import it into the POSTMAN and see if it shows the valid response.

Steps:

  1. Close all the incognito tabs/windows and try to open the freecash website again in new incognito window
  2. Observe that, user session is expired and it is no more logged in
  3. Go to the graphql request and try to hit the POST query with previous data(session cookie in the header)
  4. Observe that, uses is still authorised with expired session cookie.

Actual Result: When user is logged out, session cookie is still authorised in Backend API

Expected Result: When user is logged out, session cookie should be unauthorised with error code 401.

Please refer attached recording for your reference.

SonalPawar2509 commented 1 week ago
SonalPawar2509 commented 1 week ago