-
Notifications
You must be signed in to change notification settings - Fork 2.2k
Description
Hello,
I have a service that uses a default user of admin, which I setup its auth as OAUTh 2.0 ROPC in the root dirrectory of the collection. 'Personal Service'
For security purposes I have a sub-dir under negative tests that tries to use the same request as a normal user, making the OAUTh 2.0 ROPC for the user in the dir 'Personal Service -> Negative tests -> User Auth'. The issue is that in the GUI mode, insomnia takes the first oauth generated, after clearance. This means that all tests under dir 'User Auth' took the JWT as an admin from the first ever dirrectory of the colleaction, not as the user I set it to take.
Keep in mind that if i clear all oauth then fetch the token for the User one, then all of the requests under the root dir will send the JWT as User. This looks as a persisting oauth but over same host without new checks.
Any clues if this is an app bug or I miss something?