search

vhs / vhs-laser-access

VHS Laser Access Application
1 stars 0 forks source link

User login persists between sessions #2

Open TyIsI opened 6 years ago

TyIsI commented 6 years ago

If the previous user doesn't log out, a new user is able to enable the laser without logging in.

TyIsI commented 6 years ago

It seems that it is only when a user is already authenticated, that the registered user is not overwritten by the new user.

  1. User A opens http://laser.vanhack.ca/
  2. User A logs in
  3. User A enables the laser
  4. User A activates laser
  5. User A uses laser
  6. User A shuts down laser
  7. User B opens http://laser.vanhack.ca/ with existing session
  8. User B activates laser as User A

This needs more testing.