RE: [coldbox:16912] Caching

What code do you run when a user logs in? Do you always use the getUserSession() call to get the logged in user?

Also, can you confirm that all production users have different CFID/CFTokens or JSessionIDs?

Are users getting the data from the first user who logged in, or the last user who logged in?

Thanks!

~Brad

ColdBox Platform Evangelist
Ortus Solutions, Corp

E-mail: brad@coldbox.org
ColdBox Platform: http://www.coldbox.org
Blog: http://www.codersrevolution.com

What code do you run when a user logs in? Do you always use the getUserSession() call to get the logged in user?

The userValidator code I posted earlier runs as an interceptor. I will include more of that code below, but yes, the getUserSession() call is run on every request including to get the user logged in.

Also, can you confirm that all production users have different CFID/CFTokens or JSessionIDs?

I’ve already taken the application out of production, but on staging and development, users are getting unique CFIF/CFTOKENs.

Are users getting the data from the first user who logged in, or the last user who logged in?

First user. If I reinit the application, whatever user logged in first has their data persisted. If I log out, it sets loggedIn to false and you would think that would affect other users, but it doesn’t:

Logout action from the UserService