Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We鈥檒l occasionally send you account related emails.

Already on GitHub? Sign in to your account

The Oauth sessions from deep links expires on mobile when two different apps runs on the same project #5893

Open
2 tasks done
rohankm opened this issue Jul 27, 2023 · 4 comments
Labels
bug Something isn't working product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services.

Comments

@rohankm
Copy link

rohankm commented Jul 27, 2023

馃憻 Reproduction steps

The OAuth sessions from deep links expire on mobile when two different apps are running on the same project.

馃憤 Expected behavior

Each of the two different apps should have distinct sessions that do not get replaced by one another.

馃憥 Actual Behavior

At present, the sessions are being replaced by one another. This means that when one app creates a session, it overwrites the session of the other app, causing conflicts and undesirable behavior. To ensure that each app maintains its own separate session without interfering with the other, appropriate changes or improvements to the session handling mechanism should be implemented.

馃幉 Appwrite version

Version 1.3.x

馃捇 Operating system

Linux

馃П Your Environment

No response

馃憖 Have you spent some time to check if this issue has been raised before?

  • I checked and didn't find similar issue

馃彚 Have you read the Code of Conduct?

@rohankm rohankm added the bug Something isn't working label Jul 27, 2023
@stnguyen90
Copy link
Contributor

Related: #1515

@stnguyen90 stnguyen90 added the product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services. label Jul 27, 2023
@rohankm
Copy link
Author

rohankm commented Jul 27, 2023

Related: #1515

Even if we have different callbacks for the deeplink.. still the session conflict takes place.. bec the cookie is stored in the browser end which is unique per project.. so whenever the 2nd app logins the 1st apps session would be deleted...

the solution to this is to not set any cookies for the default success page.

@gewenyu99
Copy link

@rohankm Hey, I'm following up on this. Looks like an interesting issue 馃槣 and I'm super curious how this happened.

Can I get more information about your setup?

  • What platforms are you using
  • Why do you need more than one apps on the same project.
  • Why are you hitting session conflicts when deeplinking for two different apps, are the apps hosted on the same domain?

Thanks 馃憤 Once I know what your setup is like, I'll try to find someone who can look into this deeper.

@rohankm
Copy link
Author

rohankm commented Sep 9, 2023

Hi,

  1. this affects android platform
  2. there can be multiple reasons for having two apps on the same project (admin and user)
  3. Yes the apps are hosted on the same domain

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working product / auth Fixes and upgrades for the Appwrite Auth / Users / Teams services.
Projects
None yet
Development

No branches or pull requests

3 participants