{"action":"created","issue":{"url":"https://api.github.com/repos/yiisoft/yii2/issues/8409","labels_url":"https://api.github.com/repos/yiisoft/yii2/issues/8409/labels{/name}","comments_url":"https://api.github.com/repos/yiisoft/yii2/issues/8409/comments","events_url":"https://api.github.com/repos/yiisoft/yii2/issues/8409/events","html_url":"https://github.com/yiisoft/yii2/issues/8409","id":76077096,"number":8409,"title":"User Identity Secure? ","user":{"login":"BAWES","id":5470101,"avatar_url":"https://avatars.githubusercontent.com/u/5470101?v=3","gravatar_id":"","url":"https://api.github.com/users/BAWES","html_url":"https://github.com/BAWES","followers_url":"https://api.github.com/users/BAWES/followers","following_url":"https://api.github.com/users/BAWES/following{/other_user}","gists_url":"https://api.github.com/users/BAWES/gists{/gist_id}","starred_url":"https://api.github.com/users/BAWES/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/BAWES/subscriptions","organizations_url":"https://api.github.com/users/BAWES/orgs","repos_url":"https://api.github.com/users/BAWES/repos","events_url":"https://api.github.com/users/BAWES/events{/privacy}","received_events_url":"https://api.github.com/users/BAWES/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-05-13T18:22:34Z","updated_at":"2015-05-16T16:37:51Z","closed_at":null,"body":"Is there any way a user can force switch his Yii::$app->user->identity without logging into another account?\r\n\r\nDuring development I was logged in as user id #1. I made some design changes to the view then hit refresh then I was suddenly logged in as user id #3 (which I don't have the access details for)\r\n\r\nI relogged and tried replicating the issue but it never happened again. It's really creepy "},"comment":{"url":"https://api.github.com/repos/yiisoft/yii2/issues/comments/102649592","html_url":"https://github.com/yiisoft/yii2/issues/8409#issuecomment-102649592","issue_url":"https://api.github.com/repos/yiisoft/yii2/issues/8409","id":102649592,"user":{"login":"cebe","id":189796,"avatar_url":"https://avatars.githubusercontent.com/u/189796?v=3","gravatar_id":"","url":"https://api.github.com/users/cebe","html_url":"https://github.com/cebe","followers_url":"https://api.github.com/users/cebe/followers","following_url":"https://api.github.com/users/cebe/following{/other_user}","gists_url":"https://api.github.com/users/cebe/gists{/gist_id}","starred_url":"https://api.github.com/users/cebe/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cebe/subscriptions","organizations_url":"https://api.github.com/users/cebe/orgs","repos_url":"https://api.github.com/users/cebe/repos","events_url":"https://api.github.com/users/cebe/events{/privacy}","received_events_url":"https://api.github.com/users/cebe/received_events","type":"User","site_admin":false},"created_at":"2015-05-16T16:37:51Z","updated_at":"2015-05-16T16:37:51Z","body":"session name can be set like this in app components config:\r\n\r\n```php\r\n'session' => [\r\n\t'name' => 'yii-backend',\r\n],\r\n```\r\ncookie validation key is part of the request config and should already be there.\r\n"}}