Description
When a user attempts to access a page with a site_id parameter they lack permissions for, they are logged out. However, they cannot log back in due to a redirection issue—upon login, the site_id persists as an unauthorized ID, causing an immediate logout loop.
Steps to Reproduce
- Log into the Admin console in CD or Festivity.
- Navigate to any page, then manually modify the site_id parameter in the URL to a valid but unauthorized site_id.
- Observe that you are logged out.
- Attempt to log back in—you will be redirected and logged out again.
- Clear cookies or use an incognito window to access the admin console, then log in successfully.
Expected Behavior
After logging out due to unauthorized access, the user should be able to log back in without encountering a persistent redirection issue.
Description
When a user attempts to access a page with a site_id parameter they lack permissions for, they are logged out. However, they cannot log back in due to a redirection issue—upon login, the site_id persists as an unauthorized ID, causing an immediate logout loop.
Steps to Reproduce
Expected Behavior
After logging out due to unauthorized access, the user should be able to log back in without encountering a persistent redirection issue.