You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Users signed in using OAuth have only 1 sessionToken per Sign-In #4328
We use Google OAuth to sign in users to to parse-server. We require users to be signed in from multiple devices.
If user signs in from website using his Google account (parse JS SDK), he gets session token r:AAA.
Then he signs in on mobile device (parse IOS SDK), gets session token r:BBB, and token r:AAA gets removed, and website session signed out.
Problem seems to be in RestWrite.js :338, there session gets deleted from local cache, and from MongoDB as well.
This doesn't happen if user signs in using parse-server username/password combination.
Expected Results
User should have both sessions available, and active on both devices. This is how it used to be on parse.com, right?...
@cipiripper Looking back in the history it looks like this was changed in #4143 to address #2885, as this was a bug and not expected functionality. You can see this is noted in the docs as well. The history there indicates this language was present in the initial commit so it probably was the same for parse.com.
Disregard for comment below, although the change above was for a bug fix it was not something that should have an impact on this issue.
To agree with @flovilmart this shouldn't cause you a problem as it's just clearing duplicates for multiple sessions with the same installationId. The device and browser session shouldn't conflict with each other in this regard, unless a matching installationId was being set onto the web session for some reason.
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.
Activity
cipiripper commentedon Nov 8, 2017
Okay this as well
RestWrite.js:So when user logs in, all his SessionTokens from this installationId get removed... Why(infinity * ?)
flovilmart commentedon Nov 8, 2017
this only destroy the session for the
this.auth.installationIdso should never affect other sessions that were created on other devices.montymxb commentedon Nov 8, 2017
@cipiripper Looking back in the history it looks like this was changed in #4143 to address #2885, as this was a bug and not expected functionality. You can see this is noted in the docs as well. The history there indicates this language was present in the initial commit so it probably was the same for parse.com.Disregard for comment below, although the change above was for a bug fix it was not something that should have an impact on this issue.
montymxb commentedon Nov 8, 2017
To agree with @flovilmart this shouldn't cause you a problem as it's just clearing duplicates for multiple sessions with the same
installationId. The device and browser session shouldn't conflict with each other in this regard, unless a matching installationId was being set onto the web session for some reason.cipiripper commentedon Nov 8, 2017
stale commentedon Sep 18, 2018
This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. Thank you for your contributions.