Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Login Blocked After Unauthorized site_id Access #919

Open
jaredblumer opened this issue Feb 17, 2025 · 0 comments
Open

Login Blocked After Unauthorized site_id Access #919

jaredblumer opened this issue Feb 17, 2025 · 0 comments

Comments

@jaredblumer
Copy link
Contributor

Description

When a user attempts to access a page with a site_id parameter they lack permissions for, they are logged out. However, they cannot log back in due to a redirection issue—upon login, the site_id persists as an unauthorized ID, causing an immediate logout loop.

Steps to Reproduce

  1. Log into the Admin console in CD or Festivity.
  2. Navigate to any page, then manually modify the site_id parameter in the URL to a valid but unauthorized site_id.
  3. Observe that you are logged out.
  4. Attempt to log back in—you will be redirected and logged out again.
  5. Clear cookies or use an incognito window to access the admin console, then log in successfully.

Expected Behavior

After logging out due to unauthorized access, the user should be able to log back in without encountering a persistent redirection issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant