224446 - Double login to the same website with different accounts "overwrites" the old session with the new one on both open browser windows

Status: VERIFIED DUPLICATE of bug 117222

(Core :: Networking: Cookies, defect)

Description

[Daniel]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0; Takdin)
Build Identifier: Mozilla-1.2.1:26:35

(I haven't checked with other websites but this is my expiriance with this 
website, I believe the problem exists with all websites - further check is 
required) 
Let's call account one "A"
And the second account "B" - Both are etrade accounts.
After login into account "A" I see a certain page, doesn't matter which one. 
That page belongs to account "A".
I then open a second browser window and login with acount "B" to etrade.  I see 
a certain page.
I then go back to the browser window where I previously had account "A" already 
logged in and would like to check a different page for account "A".  
Unfortunetly once clicking a different page on the account "A" browser I 
recieve the details and account data of account "B".

Basically once logging in, on the same domain, to two different account , the 
browsers rememebrs (cookies perhaps?) the last log in, meanning you can only 
login with one account to one domain/website at a time.

Reproducible: Always

Steps to Reproduce:
1.Open browser, load "www.etrade.com" choose U.S.A (or use link mentioend above)
2.Login to some account, john doe, doesn't matter.
3.Open a new mozilla browser window.
4.Load up etrade again on the new browser window.
5.Login in that new window to a different account, john doe 2.
6.Go back to the previous browser window which already have account "john doe" 
(the first) logged in.
7. Try to load a different page in that browser and see that u receieve the 
data for account "B" or "John doe 2" (the second).

Actual Results:  
Received the data of account "B" or "John doe 2" in a window where I was logged 
in as account "A" or "John doe".

Expected Results:  
Given the user the option to login to a certain websites on multiple instances 
(multiple windows) with different accounts and be able to stay logged in to the 
account loaded/logged in , in each window respectively.

Comment 1

[[e-mail]]

this could be a dupe of the "make new browser windows use a separate session" bug.

reporter: can you explain how IE behaves here? try with two cases:
1) log in to first account, open a new window using ctrl-N, log in to second account
2) log in to first account, open a new browser instance by launching the IE icon
in your quicklaunch bar, log in to second account

how does IE behave in both cases?

Comment 2

[Alfonso Martinez]

*** This bug has been marked as a duplicate of 117222 ***

Comment 3

[[e-mail]]

reporter: ignoring the dupe, please do still answer comment 1, just so we can be
sure. ;)

Comment 4

[Daniel]

Mr. Witte: In both cases IE would create a "new set of sessions".  Checked both 
clicking the "E" logo icon and CTRL+N.  In both cases I could log into two 
completely different accounts and one window won't depend on the other or 
affect the other in any way.

In mozilla on my linux box you get the same response regardless of how you 
start the new window.

Also: Mozilla in windows has a very similar bug.  Please let me describe.
In windows, upon openning the new mozilla window, when entering the website and 
pressing enter (in our example "www.etrade.com"). Mozilla loads up the 
requested website already loged in with the "A" (John doe) account and every 
change (i.e diff pages, log off etc) effected every mozilla window.  Basically 
what we're seeing is one cookie per domain with no regards to mozilla instance.

Last note.  I am new to bug reporting.  This is my first and I am AMAZED of the 
quickness and efficency.  This just proves the worth of the open source 
community which bits the hell out of our fellow corporate we all grew up on 
calling Microsoft.  :))

Comment 5

[Daniel]

ADD ON TO #C4

Mr. Witte: I have to redraw on my writings as for further investigation in I.E 
have yielded the following results.

Openning a new instance by means of CTRL+N:  Session remains the same.  Account 
A is reopened in the new window and every change in status of Account "A" (i.e 
logoff) affects the parent window as well.

Openning a new window by means of ICON CLICKING:  Creates a new set of sessions 
in which one window does not affect the other.

Comment 6

[[e-mail]]

>Openning a new instance by means of CTRL+N:  Session remains the same.

right, that was what i was getting at. so this confirms the etrade behavior is
due to mozilla not allowing different sessions with different instances.

a workaround for this would be to start another mozilla instance using a
different profile (run "mozilla -profilemanager" to choose, or "mozilla -p foo"
to start mozilla using profile foo).

then you'll get completely isolated sessions using the two profiles, and you can
log in to etrade on each.

>This is my first and I am AMAZED of the quickness and efficency.

we try ;)

Comment 7

[[e-mail]]

reresolving dupe.

*** This bug has been marked as a duplicate of 117222 ***

Comment 8

[Daniel]

Hello,

I am wonderinf if it's possible to get mozilla to open sessions as needed automatically with the default 
session settings everytime we press the icon on the desktop and not use the CTRL+N combination?

It seems more logical to me that a new session is opened, thus allowing the user to log in to the same 
domain with the same account without havnig to go thru the process of creating a new profile and 
selecting one for everytime he/she wants a new session that is totally undependent of another opened 
mozilla window.

Comment 9

[[e-mail]]

yes, i agree with you - and that's why there's another bug filed for this. it's
bug 117222. this bug report is identical to that one, which is what the
RESOLVED/DUPLICATE notation means.

so, i'm going to dupe this bug again. please don't reopen it - if you have
something useful to add, you can add your comments to bug 117222.

*** This bug has been marked as a duplicate of 117222 ***