batchblue / batchbook-api

Official API documentation for Batchbook
http://batchbook.com
12 stars 2 forks source link

Caching of auth_token or reading from cookie? #1

Closed jstrouse closed 12 years ago

jstrouse commented 12 years ago

Seems that calling the api from the browser returns different results if you call it for multiple accounts in the same session (i.e. from a browser),

i.e. https://apitest.batchbook.com/api/v1/people.xml?auth_token=GR5doLv88FrnLyLGIwok and then https://apitest.batchbook.com/api/v1/people.xml?auth_token=6B8YOw9x1tnbKZuUeVkc

both return data, but calling them in reverse order in a new session both return blank results. Seems to be related to a batchdeux_session cookie.

erickrause commented 12 years ago

Seems to be a cookie issue when done from the browser. Thanks for the heads up. I'll be removing session store for token authentication. It will get deployed when we next push to production.