Casdoor 注册多个账号后 登入的 C,D,E,F账号 实际都是进入 B 账号

[WadeChenn]

📦 部署环境

Docker

📌 软件版本

预览版v1.22.8

💻 系统环境

Other Linux

🌐 浏览器

Edge

🐛 问题描述

在本地使用 dockercompose 搭建的本地数据库版本
所有的功能正常使用,登入和注册都正常
但是在除了 admin 和第二,三个账户以外,新建的第四个账号 登入进去都是显示的第三个账号,无论后续新建多少个账号,在其他的浏览器甚至电脑注册登入进去的都是第三个账号. 但是登入 admin 又是正常的

📷 复现步骤

注册多个账号,多端登入的都是同一个账号

🚦 期望结果

账号正确

📝 补充信息

无

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

📦 Deployment environment

Docker

📌 Software version

Preview version v1.22.8

💻 System environment

Other Linux

🌐 Browser

Edge

🐛 Problem description

A local database version built locally using dockercompose
All functions are working normally, login and registration are normal.
However, in addition to admin and the second and third accounts, the third account will be displayed when logging in to the newly created fourth account. No matter how many accounts are created subsequently, the third account will be displayed when registering and logging in from other browsers or even computers. The third account. But logging in to admin is normal.

📷 Steps to reproduce

Register multiple accounts and log in from multiple terminals with the same account

🚦 Expected results

Account is correct

📝 Supplementary information

No

[lobehubbot]

👀 @WadeChenn

Thank you for raising an issue. We will investigate into the matter and get back to you as soon as possible.
Please make sure you have given us as much context as possible.
非常感谢您提交 issue。我们会尽快调查此事，并尽快回复您。 请确保您已经提供了尽可能多的背景信息。

[dosubot[bot]]

Hello @WadeChenn! I'm here to help you with any bugs or questions you have. I can assist with solving issues, answering queries, and guiding you to become a contributor. Let me know how I can assist you with the bug you've encountered.

It seems like there is a bug in the lobe-chat application where logging into multiple accounts results in accessing the same account (the third account) instead of the intended one. This issue occurs when using a local database setup with Docker, and it affects accounts beyond the third one, while the admin account works correctly.

To address this issue, you might want to check the session management and authentication logic in your setup. Ensure that session tokens are being correctly assigned and validated for each user. Additionally, verify that the database is correctly storing and retrieving user session data.

If the problem persists, consider reviewing the session and authentication configurations, especially if you're using next-auth or Clerk for managing sessions and authentication. There might be a misconfiguration or a bug in the session handling logic that needs to be addressed.

To continue talking to Dosu, mention @dosu.

[WadeChenn]

如果我将第三个账号在 casdoor中删除..问题依旧..要在 lobe 的user 数据库中删除对应的账号信息才正常

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

If I delete the third account in casdoor, the problem remains. I have to delete the corresponding account information in the user database of lobe to make it normal.

[WadeChenn]

如果我将第三个账号在 casdoor中删除..问题依旧..要在 lobe 的user 数据库中删除对应的账号信息才正常

补充: 从注册的第四个账号之后的账号 不会再 lobe 的 user 表单中出现 表单中始终只有三个 user

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

If I delete the third account in casdoor, the problem remains. I have to delete the corresponding account information in the user database of lobe to make it normal.

Supplement: Accounts starting from the fourth registered account will no longer appear in the user form of lobe. There are always only three users in the form.

[arvinxx]

@cy948 来看看？

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

@cy948 Come and take a look?

[seanyan622]

@WadeChenn 是的，我也遇到这个问题。跟casdoor应用设置中的邮箱信息有关。
猜测或许是同邮箱的账户合并了？
应急解决办法：casdoor -> 身份认证 -> 应用，开启“电子邮箱”注册项就正常了。

[seanyan622]

补充一个比较妥当的解决办法：
在 casdoor 的默认配置文件 init_data.json 中的 applications -> signupItems 中添加一个关于邮箱的选项，然后重启容器。
"No verification" 表示不验证邮箱的有效性，也可以根据 casdoor 提供的文档自行设置。

{
    "name": "Email",
    "visible": true,
    "required": true,
    "prompted": false,
    "rule": "No verification"
},

[cy948]

这个方法可能会含有潜在的风险，如 A 用户冒用 B 用户的邮箱进行注册。最好配置SMTP服务。

[seanyan622]

确实，欠考虑了，几个认识的朋友小范围使用，没考虑周全 !!!∑(ﾟДﾟノ)ノ
多谢提醒~

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

@WadeChenn Yes, I have this problem too. It is related to the email information in the casdoor application settings.
I guess the accounts with the same email address may have been merged?
Emergency solution: casdoor -> Identity Authentication -> Application, turn on the "email" registration item and it will be normal.

[WadeChenn]

@WadeChenn 是的，我也遇到这个问题。跟casdoor应用设置中的邮箱信息有关。 猜测或许是同邮箱的账户合并了？ 应急解决办法：casdoor -> 身份认证 -> 应用，开启“电子邮箱”注册项就正常了。

感谢! 能有应急方案就是救命的...我确实没有定位到邮箱这一层面.一直在尝试修改表里面的 id 和名称

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

@WadeChenn Yes, I have this problem too. It is related to the email information in the casdoor application settings. I guess the accounts with the same email address may have been merged? Emergency solution: casdoor -> Identity Authentication -> Application, turn on the "email" registration item and it will be normal.

Thank you! It would be life-saving to have an emergency plan...I really haven't targeted the mailbox level. I have been trying to modify the id and name in the table.

[cy948]

目前有两层账号根据邮箱自动链接：

1. Casdoor 层面，便于用户在 casdoor 中接入不同的 SSO；

lobe-chat/docker-compose/local/init_data.json

Line 53 in fc1d0a6

"enableLinkWithEmail": true,

3. LobeChat 层面，便于用户在使用不同的 Auth Provider 时自动链接 lobe 中的帐户。

[seanyan622]

• 目前Casdoor的默认初始化配置“init_data.json”，缺少对于注册页面 Email 字段的配置，导致默认情况下注册的多个账号的邮箱都为空，于是绑定在了一起。 或许可以更新一下 “init_data.json”, 对邮箱字段给一个默认配置。

• 另外请教个小问题，我要将邮箱的验证规则设置为“不验证” （如下图），我应该将 “init_data.json” 中的邮箱配置 “rule”字段填充为什么？
  { "name": "Email", "visible": true, "required": true, "prompted": false, "rule": "???" },
  

[lobehubbot]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

There are currently two levels of accounts automatically linked based on email addresses:

1. Casdoor level, which facilitates users to access different SSOs in casdoor;

lobe-chat/docker-compose/local/init_data.json

Line 53 in fc1d0a6

"enableLinkWithEmail": true,

3. The LobeChat level allows users to automatically link accounts in the lobe when using different Auth Providers.

[cy948]

这个配置只是用来给一键部署脚本做casdoor初始化，给用户在本地体验的，所以没有提供太多设置。另外，casdoor官方没有提供这个json的字段的解释，你需要自行寻找具体的配置。最后，如果你已经部署了应用，推荐你在web面板上修改。

[seanyan622]

我也是没找到关于这个字段的配置说明，自己猜了几个词也没猜对。
部署应用后在web面板修改确实有效，但是重启docker容器后还是会恢复默认配置。需要在 “docker-compose.yml” 里面注释掉关于 casdoor 默认配置挂载卷才行。

[seanyan622]

找到 casdoor 官方对于注册项的参数说明了。https://casdoor.org/docs/application/signup-items-table/
如下配置即可启用邮箱字段，且不需要验证邮箱。

{
    "name": "Email",
    "visible": true,
    "required": true,
    "prompted": false,
    "rule": "No verification"
},