Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Authorization - Can create blog after logout #573

Open
linhbii opened this issue Dec 18, 2020 · 0 comments
Open

Authorization - Can create blog after logout #573

linhbii opened this issue Dec 18, 2020 · 0 comments

Comments

@linhbii
Copy link

linhbii commented Dec 18, 2020

Step to reproduce:

  1. Open browser, in first tab, go to lovelock.one, login and go to personal blog

  2. In second tab, open the same link of first tab then try to logout (delete sessionData of lovelock.one)
    Observed: in second tab, press F5, user is logged out and navigated to login screen. At this time, in client all sessionData from lovelock.one is deleted. I expected that all user's permissions are unauthorized from now.

  3. In first tab, click to Create link on the top right panel

  4. Popup for creating new blog opens. Input valid data to create a journal then click Send
    Expected: User is navigated to Login screen to request logging in again
    Issue: Request is still sent to server and executed successfully. New Journal is created for user.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant