abraham/twitteroauth — Issue #121: First user to authenticate stays logged in forever
Author: javiervd
Created: 2012-01-24 03:34:43+00:00
State: open

Hi, I'm not sure if this is a twitter, oauth or library problem but hopefully you guys can point me in the right direction. I set up the library just fine in my app, but a have a strange problem when trying to auth different user on the same computer, basically the first user to sign in gets logged fine but even if he logs out and a new user tries to log in on the same computer/browser I get the info from the first user. So the workflow that produces the problem is like this:

1. TwitterUser 1 sings with twitter to my app (he gets prompted his username and pwd and redirected back successfully)
2. TwitterUser 1 logs out of my app, and even logs directly from twitter by going to twitter.com and signing out.
3. TwitterUser 2 sings in to my app, he also gets prompted his username and pwd and redirected back
4. If I `var_dump()` verify_credentials now I get the info from the first user even though I'm logged in as TwitterUser 2 (if I go to twitter.com at this point I get the timeline from TwitterUser 2.

If I go to a new browser and log as TwitterUser 2 it works fine but if I logout and try to login as TwitterUser 1 the problem continues.

I know oauth doesn't let me sign out of twitter so I'm using `force_login=true` on my authorize url, but still this shouldn't happen right?