Open
Description
Preconditions and environment
- 2.4.6-p8
Steps to reproduce
Steps to Replicate the Bug in Magento 2:
-
Set up two websites in Magento 2:
- Web1: Configure this website under the primary domain. For example,
https://primary-domain.com
. - Web2: Configure this website under a different domain. For example,
https://different-domain.com
.
- Web1: Configure this website under the primary domain. For example,
-
Create a customer in Web2:
- Log in to the admin panel.
- Navigate to
Customers > All Customers
. - Click Add New Customer and ensure the customer is assigned to Web2.
-
Test scenario using the same browser session:
- Open the admin panel (
https://primary-domain.com/admin
) and log in as an admin. - Open a new tab in the same browser session and navigate to the frontend of Web1 (
https://primary-domain.com
).
- Open the admin panel (
-
Attempt to log in as the customer in Web2 via the backend:
- In the admin panel, go to
Customers > All Customers
. - Locate the customer created in Web2 and click Login as Customer.
- Observe the behavior in the frontend of Web1.
- In the admin panel, go to
Possible Cause:
Magento's session management and customer login mechanisms may conflict due to cross-domain cookies, domain-specific sessions, or scope mismatches between Web1 and Web2.
Expected result
The customer should be logged in successfully in Web2.
Actual result
The customer login fails on the frontend of Web1.
Additional information
No response
Release note
No response
Triage and priority
- Severity: S0 - Affects critical data or functionality and leaves users without workaround.
- Severity: S1 - Affects critical data or functionality and forces users to employ a workaround.
- Severity: S2 - Affects non-critical data or functionality and forces users to employ a workaround.
- Severity: S3 - Affects non-critical data or functionality and does not force users to employ a workaround.
- Severity: S4 - Affects aesthetics, professional look and feel, “quality” or “usability”.