After Reset The Password In The Android OBDX Application, The Older Session Does Not Expire. (Doc ID 2755618.1)

Last updated on JUNE 16, 2021

Applies to:

Symptoms

ACTUAL BEHAVIOR
---------------
In the Android application, When a retailer/corporate user is trying to resets password using the forgot password page, the older session does not expire. Users can log in back again in her/his older session.

EXPECTED BEHAVIOR
-----------------------
Existing user session should be invalidated after resetting the password in the android application.

STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Login with mobile by a retailer/corporate user.
2. Complete the forget password flow on the internet browser.
3. Observe that the logged-in mobile session does not get invalidated in the Android device

BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, android mobile users cannot log in by using a new password.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.