[🐛] Basket Access challenge solved by switching between two users

[rixtrayker]

View another user basket challenge solved itself after logging with another user on the same browser..
( After changing between users multiple times ) I think that was cause of cookies

[github-actions]

Thanks a lot for opening your first issue with us! 🧡 We'll get back to you shortly! ⏳ If it was a Support Request, please consider asking on the community chat next time! 💬

[bkimminich]

To reproduce this behavior, could you tell us what users you used and if the behavior is reproducable after a specific number of switches or occurs rather "randomly"? Also, are you using a single tab or multiple ones? The session handling is terrible by design, but it shouldn't hit the challenge too easily, so every bit of information would help. Thanks!

[bkimminich]

I can't reproduce the behavior you describe when doing the following loop 5 times:

1. Log in as demo
2. View basket
3. Log out
4. Log in as admin@juice-sh.op
5. View basket
6. Log out
7. Repeat step 1

So I would assume you have done something else in the meantime as well, but without knowing what it is, I can't determine if that is a bug or not.

[rixtrayker]

May be I had another tabs logged in with another user, then refreshed basket in one of those tabs. It sent api the action via socket and found that the basket wasn't mine.
That is what I guessed.
I'll reproduce it and inform you soon.

[github-actions]

This thread has been automatically locked because it has not had recent activity after it was closed. 🔒 Please open a new issue for regressions or related bugs.