User sessions are mixed up between browser profiles

@Vlad do you have an update on this? The loss of session isolation between profiles is a pretty serious security concern
Thank you

gabfl We are workign to reproduce it and will update in next release.

Vlad is there a path to rollback in the meantime? How do I re-install the previous version?
When I open Gmail for examples, it switches between sessions all the time, it's not very usable currently

Confirming I am experiencing this too

This appears to only happen when launching the Orion Profile Session from the MacOS Dock or via Spotlight/Alfred/Etc.

To recreate: pin the Orion Profile 2 in your MacOS dock. Quit the Orion Profile 2 while keeping Profile 1 open. Open Profile 2 from the Dock or Open Profile Session 2 using App Launcher.

Note: if Profile 2 is closed. I am able to go to File > Profiles and select the Profile I want and it will launch correctly.

With the latest Orion update, this broke for me again. And I'm no longer able to fix it by opening the second profile via the File menu.

I'm Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2)

@dino are we able to reproduce this yet?

dannb Can you please share some more info we need to reproduce the issue

1. macOS version
2. Any installed extension
3. Did you moved any tab from Profile 1 to Profile 2?
4. Can you try this with two clean profiles

Vlad unfortunately not yet, I guess we are missing some specific step

MacOS 14.5 (23F79). Orion Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2).

I think moving a tab to a new window (sliding the tab out of a tree to make it become its own window) is what triggers the bug because that's what I was doing the last 2 times I noticed it.

It happens with Github, Gmail and Youtube but I assume it can happen with any website (I just used these in both profiles)

Killian When we have clear steps to reproduce it, still are not able to.

I had two Orion windows open. One with my personal profile and another with my work profile. I "Quit" Orion. I restart my MacBook. I open Orion and both windows reopen. I check my Gmail on my personal profile, and it's signed in under my work account. I logged out of all Google accounts to confirm that the two profiles have randomly started to share website data???. They still do not share browser history, however.

I expected it to keep the website data separate as it was configured to. And how it had been doing for many months.

Version 0.99.128.2.1-beta (WebKit 619.1.11.111.2)

Sonoma (14)

Any update on this issue?

gabfl we applied some fix which will be available in next release, let's see if that fixes the issues, as that's based on moving tab to another profile, as that's the only possibility of leaking sessions.

@dino @Vlad This issue is still ongoing, it looks like it happens when the browser restarts. It makes Orion really hard to use with Github, Gmail, Google drive and so on... I implore you to look into this issue and resolve it, it's really difficult to not be able to "trust" any session on a website

gabfl it looks like it happens when the browser restarts

Would you be able to come up with a reliable way of reproducing this issue? I have noticed my google login making its way to other profiles but I haven't been able to reproduce it consistently. This is extremely frustrating to both users and developers as this is a serious issue but in 7 months we have not been able to get further than "It sometimes happens".

As soon as there are reliable steps to reproduce the issue, the team will be able to fix it and I am sure it will be the top priority at that point.

It's not 100% of the time but could you try on our end the following:
1) Create 2 profiles and have them opened
2) On both of them, open Gmail and login to a different account in each (for example a personal account on one profile and a professional account on the other)
3) Keep the tags open but close both versions of Orion (or reboot the computer)
4) Re-open Orion. Quite often the sessions are mixed up.

I did this yesterday, and after rebooting my computer, both profiles had my professional Github, Gmail, Youtube and Google drive accounts (instead of one of the two profiles having the personal sessions of these same websites).

The tabs will remain the correct ones, same as the bookmarks and so on. Only the sessions gets mixed up. It looks like both sessions re-open with the cookies of one of them.

Does that makes sense?

I have two profiles, "Default" and "Work".
It seems like these profiles share the state of my Google account login, but I really want to keep this separate between the profiles.
When I log into a Google account in "Work", I become logged in to that account in "Default". When I log out of all google accounts in "Default", this also logs out of all Google accounts in "Work".
When I initially created "Work", I asked it to clone the "Default" cookies. I thought this was a one-time thing, but did that permanently link the profiles? It's very frustrating.

I expect that when I log into a Google account in "Work", the "Default" profile is oblivious to that account, and vis versa.

Version 0.99.130.2-beta (WebKit 621.1.2.111.4)

Sequoia (15)