Invalidate tools session if Discourse session and tools session differ. - Githubissues

debtcollective / parent

1 stars 0 forks source link

Invalidate tools session if Discourse session and tools session differ. #242

Closed orlando closed 5 years ago

orlando commented 5 years ago

There's an edge case where a user that has multiple accounts switches between does without involving the tools app. To replicate this issue do the following (you need two accounts)

Login with one account in the tools app
Go to community.debtcollective.org, log out and log in with another account
Go to the tools app again. You will have the session from the first account, but the header will show the one from (2)

Tasks

[ ] Research for a way to know if the sessions are not in sync, this is going to be easier from the client.
[ ] If session differ, redirect to /login to refresh the session.

Acceptance criteria

If users changes account outside the tools, we should refresh the session when they get back to the tools app.

orlando commented 5 years ago

@duranmla let's discuss this one, this should be done as part of the header refactor and we will need to enable some endpoints in Discourse to deal with this without API limits