search

filiphric / trelloapp

55 stars 45 forks source link

Caching bug with session management #27

Open isc-aray opened 2 months ago

isc-aray commented 2 months ago

A user reports that their session boards are sometimes still accessible after logging out because the cache is not properly invalidated on logout.

filiphric commented 2 months ago

Hello Andrew could you please provide an example test that shows this behavior?

isc-aray commented 2 months ago

Hi Filip, unfortunately, the issue doesn't appear to be consistent, but there definitely seems to be some issue when there are multiple users logging in and out quickly that causes boards to sometimes show up when they aren't supposed to. You might be able to reproduce by creating a bunch of users and throwing some automation at it to create a bunch of public and private boards.

I'm sorry not to be able to provide anything more concrete right now.