cartalyst / sentinel

A framework agnostic authentication & authorization system.
BSD 3-Clause "New" or "Revised" License
1.51k stars 238 forks source link

Prevent Users from getting same Sesstion ID #549

Open joginder89 opened 3 years ago

joginder89 commented 3 years ago

Your Environment

There are 2 users on same IP. Both users login and receive same session id like HponiRbO4VTZlfbyOSHOt7RnGmlBVhlMkUd9VDmS Both users try to logout and login again, then again get same session id. I am using nginx php-fpm cache but has skipped for /admin routes.

I do not know is it nginx php-fpm cache problem or Sentinel problem or Laravel Problem or PHP problem or anything else. How can I solve it or debug it ?

How the sesstion id is created for user when any user signin ?

I am using Sentinel::authenticate($request->only(['email', 'password']), true) for login user.