{"action":"created","issue":{"url":"https://api.github.com/repos/transloadit/uppy/issues/1563","repository_url":"https://api.github.com/repos/transloadit/uppy","labels_url":"https://api.github.com/repos/transloadit/uppy/issues/1563/labels{/name}","comments_url":"https://api.github.com/repos/transloadit/uppy/issues/1563/comments","events_url":"https://api.github.com/repos/transloadit/uppy/issues/1563/events","html_url":"https://github.com/transloadit/uppy/issues/1563","id":445351126,"node_id":"MDU6SXNzdWU0NDUzNTExMjY=","number":1563,"title":"Companion: 'Dropbox Integration logout' does not sign out (Security concern)","user":{"login":"mortalcompiler","id":38879205,"node_id":"MDQ6VXNlcjM4ODc5MjA1","avatar_url":"https://avatars2.githubusercontent.com/u/38879205?v=4","gravatar_id":"","url":"https://api.github.com/users/mortalcompiler","html_url":"https://github.com/mortalcompiler","followers_url":"https://api.github.com/users/mortalcompiler/followers","following_url":"https://api.github.com/users/mortalcompiler/following{/other_user}","gists_url":"https://api.github.com/users/mortalcompiler/gists{/gist_id}","starred_url":"https://api.github.com/users/mortalcompiler/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mortalcompiler/subscriptions","organizations_url":"https://api.github.com/users/mortalcompiler/orgs","repos_url":"https://api.github.com/users/mortalcompiler/repos","events_url":"https://api.github.com/users/mortalcompiler/events{/privacy}","received_events_url":"https://api.github.com/users/mortalcompiler/received_events","type":"User","site_admin":false},"labels":[{"id":651601329,"node_id":"MDU6TGFiZWw2NTE2MDEzMjk=","url":"https://api.github.com/repos/transloadit/uppy/labels/Companion","name":"Companion","color":"5d3fa8","default":false}],"state":"open","locked":false,"assignee":{"login":"ifedapoolarewaju","id":8383781,"node_id":"MDQ6VXNlcjgzODM3ODE=","avatar_url":"https://avatars1.githubusercontent.com/u/8383781?v=4","gravatar_id":"","url":"https://api.github.com/users/ifedapoolarewaju","html_url":"https://github.com/ifedapoolarewaju","followers_url":"https://api.github.com/users/ifedapoolarewaju/followers","following_url":"https://api.github.com/users/ifedapoolarewaju/following{/other_user}","gists_url":"https://api.github.com/users/ifedapoolarewaju/gists{/gist_id}","starred_url":"https://api.github.com/users/ifedapoolarewaju/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ifedapoolarewaju/subscriptions","organizations_url":"https://api.github.com/users/ifedapoolarewaju/orgs","repos_url":"https://api.github.com/users/ifedapoolarewaju/repos","events_url":"https://api.github.com/users/ifedapoolarewaju/events{/privacy}","received_events_url":"https://api.github.com/users/ifedapoolarewaju/received_events","type":"User","site_admin":false},"assignees":[{"login":"ifedapoolarewaju","id":8383781,"node_id":"MDQ6VXNlcjgzODM3ODE=","avatar_url":"https://avatars1.githubusercontent.com/u/8383781?v=4","gravatar_id":"","url":"https://api.github.com/users/ifedapoolarewaju","html_url":"https://github.com/ifedapoolarewaju","followers_url":"https://api.github.com/users/ifedapoolarewaju/followers","following_url":"https://api.github.com/users/ifedapoolarewaju/following{/other_user}","gists_url":"https://api.github.com/users/ifedapoolarewaju/gists{/gist_id}","starred_url":"https://api.github.com/users/ifedapoolarewaju/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ifedapoolarewaju/subscriptions","organizations_url":"https://api.github.com/users/ifedapoolarewaju/orgs","repos_url":"https://api.github.com/users/ifedapoolarewaju/repos","events_url":"https://api.github.com/users/ifedapoolarewaju/events{/privacy}","received_events_url":"https://api.github.com/users/ifedapoolarewaju/received_events","type":"User","site_admin":false}],"milestone":null,"comments":0,"created_at":"2019-05-17T09:31:47Z","updated_at":"2019-05-21T11:03:23Z","closed_at":null,"author_association":"NONE","body":"**Steps To Reproduce**\r\n1. go to https://uppy.io/examples/dashboard/ In Chrome on Windows [ 74.0.3729.157 (Official Build) (64-bit) ]\r\n2. Authenticate with Dropbox via the 'connect to dropbox' button\r\n3. Add a random file\r\n4. Within Uppy, click the logout Dropbox integration component (Log out link at top) \r\n5. Connect to Dropbox in the Uppy component again (still authenticated.....) \r\n6 Ability to add files\r\n\r\n*Expected behaviour*\r\nLogging out of integrations, removes authentication to the integration. For example a user can log into my website, authenticate with an integration, a different user can log in and then integrate with the previous user dropbox integration :(\r\n\r\n*Investigation*\r\nIt is possible to force logout by going in a separate tab to https://www.dropbox.com/logout and this logs out.\r\nRemoving the uppyAuthToken--XXXX cookie or companion-XXXX-auth-token in local storage does not stop authentication.\r\nThe issue happens with the Instagram integration too.\r\n\r\nThe https://companion.uppy.io/instagram/logout?redirect=https://uppy.io/examples/dashboard/\r\nreturns \r\n{\"ok\":true}\r\n"},"comment":{"url":"https://api.github.com/repos/transloadit/uppy/issues/comments/494344713","html_url":"https://github.com/transloadit/uppy/issues/1563#issuecomment-494344713","issue_url":"https://api.github.com/repos/transloadit/uppy/issues/1563","id":494344713,"node_id":"MDEyOklzc3VlQ29tbWVudDQ5NDM0NDcxMw==","user":{"login":"rgk1","id":41638190,"node_id":"MDQ6VXNlcjQxNjM4MTkw","avatar_url":"https://avatars0.githubusercontent.com/u/41638190?v=4","gravatar_id":"","url":"https://api.github.com/users/rgk1","html_url":"https://github.com/rgk1","followers_url":"https://api.github.com/users/rgk1/followers","following_url":"https://api.github.com/users/rgk1/following{/other_user}","gists_url":"https://api.github.com/users/rgk1/gists{/gist_id}","starred_url":"https://api.github.com/users/rgk1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rgk1/subscriptions","organizations_url":"https://api.github.com/users/rgk1/orgs","repos_url":"https://api.github.com/users/rgk1/repos","events_url":"https://api.github.com/users/rgk1/events{/privacy}","received_events_url":"https://api.github.com/users/rgk1/received_events","type":"User","site_admin":false},"created_at":"2019-05-21T11:03:23Z","updated_at":"2019-05-21T11:03:23Z","author_association":"NONE","body":"I've replicated the same issue with the Google Drive logout. Any thoughts? "}}
{"actor":{"display_login":"rgk1"}}