{"action":"created","issue":{"url":"https://api.github.com/repos/rvolz/BicBucStriim/issues/173","labels_url":"https://api.github.com/repos/rvolz/BicBucStriim/issues/173/labels{/name}","comments_url":"https://api.github.com/repos/rvolz/BicBucStriim/issues/173/comments","events_url":"https://api.github.com/repos/rvolz/BicBucStriim/issues/173/events","html_url":"https://github.com/rvolz/BicBucStriim/issues/173","id":98075312,"number":173,"title":"Parallel installations affect each others logins","user":{"login":"jeremydouglass","id":798570,"avatar_url":"https://avatars.githubusercontent.com/u/798570?v=3","gravatar_id":"","url":"https://api.github.com/users/jeremydouglass","html_url":"https://github.com/jeremydouglass","followers_url":"https://api.github.com/users/jeremydouglass/followers","following_url":"https://api.github.com/users/jeremydouglass/following{/other_user}","gists_url":"https://api.github.com/users/jeremydouglass/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremydouglass/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremydouglass/subscriptions","organizations_url":"https://api.github.com/users/jeremydouglass/orgs","repos_url":"https://api.github.com/users/jeremydouglass/repos","events_url":"https://api.github.com/users/jeremydouglass/events{/privacy}","received_events_url":"https://api.github.com/users/jeremydouglass/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/rvolz/BicBucStriim/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-07-30T03:00:44Z","updated_at":"2015-07-31T21:09:51Z","closed_at":null,"body":"As per suggestion in closed issue #110 I tried to create two parallel installations of BicBucStriim and point them at different Calibre libraries.\r\n\r\nI did this by installing the BicBucStriim from packages.synocommunity.com and then copying the clean (pre-first-configure) site into a new directory.\r\n\r\n    site1: /bbs/\r\n    site2: /bbs2/\r\n\r\nI was then able to configure each site from the web and create separate users. \r\n\r\nThe problem is that the *logins* of the two sites interact strangely. For example, if I log in as user \"foo\" on site1, then I will also be logged in on site2 -- even in a separate browser (e.g. Chrome Incognito), even if user \"foo\" doesn't exist on site2. Conversely, if user \"bar\" logs out of site2, then \"foo\" will also be logged out of site1. This sometimes leaves the sites in a state where I can then access either site content without a login from any browser, including on another machine -- even though \"Require Login\" is still set in both site1 and site2 configuration.\r\n\r\nI've tried stopping and restarting the synology Web Station; also clearing browser caches, using separate sandboxed windows and separate machines. I don't know enough about how authentication works to guess at what is happening here. I know that multiple libraries are unsupported, but any suggestions appreciated.\r\n\r\n\r\n## Setup\r\n\r\nOn a Synology DS713+ (DSM 5.01), I first installed BicBucStriim:\r\n\r\n    DSM webmin > Package Center > Community > BicBucStriim  \r\n    packages.synocommunity.com\r\n\r\nBefore visiting the site for the first time, I logged in via Terminal and made a copy of the site (with all permissions preserved):\r\n\r\n```bash\r\n$ cd /var/services/web/\r\n$ cp -r -p bbs bbs2\r\n```\r\n\r\nI then configured each site for a different library and a different user/pass login\r\n\r\n    user: foo -- library: /volume1/foo/\r\n    user: bar -- library: /volume1/bar/\r\n\r\n...and restarted Web Station.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/rvolz/BicBucStriim/issues/comments/126812929","html_url":"https://github.com/rvolz/BicBucStriim/issues/173#issuecomment-126812929","issue_url":"https://api.github.com/repos/rvolz/BicBucStriim/issues/173","id":126812929,"user":{"login":"jeremydouglass","id":798570,"avatar_url":"https://avatars.githubusercontent.com/u/798570?v=3","gravatar_id":"","url":"https://api.github.com/users/jeremydouglass","html_url":"https://github.com/jeremydouglass","followers_url":"https://api.github.com/users/jeremydouglass/followers","following_url":"https://api.github.com/users/jeremydouglass/following{/other_user}","gists_url":"https://api.github.com/users/jeremydouglass/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremydouglass/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremydouglass/subscriptions","organizations_url":"https://api.github.com/users/jeremydouglass/orgs","repos_url":"https://api.github.com/users/jeremydouglass/repos","events_url":"https://api.github.com/users/jeremydouglass/events{/privacy}","received_events_url":"https://api.github.com/users/jeremydouglass/received_events","type":"User","site_admin":false},"created_at":"2015-07-31T21:09:50Z","updated_at":"2015-07-31T21:09:50Z","body":"Thank you for looking into this!\r\n\r\nFirst, I discovered that there is a weird homepage caching bug on single installs that was a separate issue -- I believed it related to multiple installs, but it didn't.  I've filed it separately as #174.\r\n\r\nSecond, some of my testing described above were wrong. For part I used Chrome Incognito windows and assumed that each window had sandboxed cookies -- but in fact they all share one cookiejar) [1](https://support.google.com/chrome/answer/95464?p=incognito&rd=1#incognito) [2](https://code.google.com/p/chromium/issues/detail?id=24690) [3](https://code.google.com/p/chromium/issues/detail?id=90153).\r\n\r\nWhen I repeat the tests described above strictly\r\n\r\n1. using two separate browsers (Chrome -> /bbs/ and Safari -> /bb2/) and also\r\n2. making sure to completely and correctly log out while avoiding #174\r\n\r\n...then I'm not seeing any inappropriate login access right now -- so this issue may be limited to browsing two BicBucStriim sites hosted from the same server with one browser cookiejar -- much more of an edge case."}}