Hi On several occasions I have now been logged in as a different user in the midst of scrolling a thread. It has been the same user each time. We both have admin privileges. There’s nothing in the logs.

Been a while but it happened again. Changed user real time as I was scrolling a thread. However, my profile picture was still on the top right and clicking it led to my profile, despite being logged in as the other user. Seemingly I got added to the same login session as his android device. The …

This continues to occur randomly to any and all users. It hasnt happened to me but I did get signed out when it happened to someone else once. I have no idea where to even begin looking. I have a thread going on my forum that I made public to provide more information. This time 2 users became logge…

@Falco this is an ongoing issue for several years now. As far as I know this is an issue with the client side user session and the userID specifically. This issue is only circumvented but not fixed if instead of the local login aka local auth the third party auth is used. Can you confirm that this …

[image] Adubs: @Falco Any insight as to where to look is appreciated. [image] Bkr Dev: @Falco this is an ongoing issue for several years now. With all due respect, there are many thousands of Discourse installs out there in the internet. Just in our hosting we run thousands, and there …

I’m not certain what makes my setup custom vs whats baked into discourse as they’re both nginx. Its not possible for me to remove it though as discourse is not the only thing I’m hosting. I’m sure its my problem, but if its possible to have happen for me its also possible to have happen for anyone. …

[image] Falco: This means that your issue is most likely self-inflicted. Do you think thread size could be causing this? Some sort of side effect of an overflow/overrun? We go into the tens of thousands of replies on multiple threads, in varying categories.

I can understand the lack of support. We arent paying customers and some of us arent even being very nice. I dont blame you for pointing the finger at me as I agree, its something I’m doing different that causes this headache. If you genuinely believe the reverse proxy is whats causing this issue th…

[image] Chris Kennedy: Do you think thread size could be causing this? Some sort of side effect of an overflow/overrun? We run forums where topics go way over 70k replies and this haven’t caused this issue, like Forum Jeux vidéo - Gamekult or https://forums.woot.com/latest?ascending=false&or…

[image] Falco: But if it only happens on this specific instance it is a security issue on your site, and not on Discourse, right? If my reverse proxy is able to mangle some token or whatever in the right way such that discourse believes a user has become someone else… does it really matter if…

Logged in as different user real time

Support

Falco (Falco) February 19, 2025, 3:29pm 29

Do you have any caching configured on the proxy under the Discourse domain?

Topic		Replies	Views
Add 'stop impersonating' link to user avatar dropdown when impersonating Feature completed , impersonate	42	7258	October 29, 2025
Login and Logout Errors from Cache Settings Conflict with Cloudflare Support cloudflare	31	409	January 7, 2025
Integration into custom auth system where emails are not unique? SSO email	39	1492	May 7, 2024
500 error when logging in -- plugin related? Bug	8	1750	March 7, 2017
Twitter, Github and normal username and password logins not working after upgrade Self-hosting unsupported-install	34	7476	October 22, 2016

Logged in as different user real time

Related topics