2 ms·
I believe the Steam Web Store had a similar issue of people being logged in as the wrong user a couple years back.
by donatj 6y ago
I believe the Steam Web Store had a similar issue of people being logged in as the wrong user a couple years back.
- gizmo385 6y agoThat was a caching issue if I remember correctly, as opposed to users be "logged in" as a different user.
- zapt02 6y agoIsn't that the same thing? Say that you forget to specify that "my_login_cookie" should vary the response from the backend. User A logs in. Now user B logs in, but because the page was cached from user As visit, user B sees the content for user A. B is not "logged in" as A, but can still see their content.
- cheeze 6y agoThis is a very common 'advanced failure scenario.' I've seen it on a handful of sites, session objects and caching are difficult and sometimes overlooked during migrations.