heroku/heroku-bouncer — pull request #17 by raul (2013-12-06 01:46:04+00:00)
Title: Sync sessions

This PR synchronizes sessions across properties by preventing `session_nonce` mismatches. This can be useful in the following scenarios:

Scenario 1:

- User logs into property A
- User visits property B
The user gets automatically logged into B with the same account used on A

Scenario 2:

- User logs into property A with account X
- User visits property B (as seen above, gets logged into B with account X)
- User logs out from B and logs into B with a different account Y
- User visits property A
The user gets automatically logged into A with the account Y (the previous session corresponding to account X gets closed)

Scenario 3:

- User logs into property A
- User visits property B (as seen above, gets logged into B with account X)
- User logs out from property B
- User visits property A
The user gets automatically logged out from property A too