-
Notifications
You must be signed in to change notification settings - Fork 407
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
LinkedIn API session issue #260
Comments
UserA and UserB are in your app? If so then it seems like a session hijacking issue where the session is getting shared with another user. Also is your app thread-safe? |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hi All
Our web app is built around Ruby on Rails 3. We use the linkedin rubygem to integrate the LinkedIn API.
We have successful Linkedin sign-in and registrations, but at rare cases (occurring twice or thrice a year so far), a user logins/registers via LinkedIn but a totally different and unconnected user shows up. (UserA enters LinkedIn credentials for the permissions, but some LinkedIn UserB gets returned). We don't get why this happens at all.
Here is the code snippet for the OAuth url:
The bug highly makes it insecure for users. Could someone help?
The text was updated successfully, but these errors were encountered: