It's an uncommon scenario as you'd need two accounts.
Steps:
1) Attempt log in with email (request magic link) for account A (but do NOT open link)
2) Log in with account B
3) Return to magic link from step 1 and open link
4) New tab is opened, but logged in as account A still
The reason this happens is because the local storage session check occurs prior to the magic link check. This needs to be flipped, possibly even offering the user the change to stay logged in as A or switch to B.
It's an uncommon scenario as you'd need two accounts.
Steps: 1) Attempt log in with email (request magic link) for account A (but do NOT open link) 2) Log in with account B 3) Return to magic link from step 1 and open link 4) New tab is opened, but logged in as account A still
The reason this happens is because the local storage session check occurs prior to the magic link check. This needs to be flipped, possibly even offering the user the change to stay logged in as A or switch to B.