clarify that session scoping is needed even when other forms of identification are used

This commit is contained in:
Samuel Štancl 2024-04-06 03:15:21 +02:00 committed by GitHub
parent bc9de2e043
commit 23211b1784
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -8,7 +8,7 @@ section: content
Session scoping is one thing that you might have to deal with yourself. Session scoping is one thing that you might have to deal with yourself.
The issue occurs when you're using multiple tenant domains and databases. Users can change their session cookie's domain and their session data will be shared in another tenant's application. The issue occurs when you're using multiple tenant databases. Users can change their session cookie's domain and their session data will be shared in another tenant's application.
Here's how you can prevent this. Here's how you can prevent this.