Defect HC-15185

Partially authenticated API getting expired activity error with registered user's persistent cookie when multiLogon enabled

Software

Customer case Applies to Corrected in
CS0289011 V8.0.4.25 8.0.4.29

Observed behavior

When AllowMultipleLogonForSameUser is enabled, REST API calls fail with the Activity Expired exception when tokens are used.

Expected behavior

The operation should proceed correctly with no exceptions thrown.

Resolution

When there is a token supplied, the cookies should not be used. The code was updated to ensure that when tokens are used for the user session, the cookie expiry check should not happen.