search

vuefront / opencart

Free PWA & SPA for OpenCart
https://opencart.vuefront.com/
74 stars 26 forks source link

authorization is missing #21

Open sivakumarkoduru opened 4 years ago

sivakumarkoduru commented 4 years ago
  1. i can edit account information, change password, add address if page is not refreshed.
  2. Now if i page refresh i can't edit account information etc details.

I think we are not checking is a valid user to change his account details.

$this->customer is null once you refresh the page. can you give me some information how you are persisting $this->customer in php side for further requests.

rivor commented 4 years ago

It's issue with cookies, your session in cookies isn't properly saved which causes this. Weird enough, it's made on session states instead of stateless JWT or something similar. You can try disabling SameSite for opencart but i'm not sure where that can be done.