Cart is lost after logging in again

[nyze2oo9]

PHP Version

8.3

Shopware Version

6.5.8.8

Expected behaviour

1. A customer logs in via store-api.account.login
2. The customer add at least one product to the cart store-api.checkout.cart.add
3. The customer logs out via store-api.account.logout
4. The customer logs in again.

The old cart should be linked to the new context token or the old context token should be linked to the customer again.

Actual behaviour

1. A customer logs in via store-api.account.login
2. The customer add at least one product to the cart store-api.checkout.cart.add
3. The customer logs out via store-api.account.logout
4. The customer logs in again.

Old context is still in sales_channel_api_context

  {
    "token": "1",
    "payload": "{\"expired\": false, \"customerId\": null}",
    "sales_channel_id": "...",
    "customer_id": null,
    "updated_at": "2024-04-15 13:54:06"
  }

A new context exists:

  {
    "token": "2",
    "payload": "{\"expired\": false, \"customerId\": \"018ed64348c27210a98e3dacbe47c4ef\", \"permissions\": [], \"billingAddressId\": null, \"shippingAddressId\": null}",
    "sales_channel_id": "...",
    "customer_id": "018ED64348C27210A98E3DACBE47C4EF",
    "updated_at": "2024-04-15 13:58:36"
  }

Old Cart is still there with old context token:

  {
    "token": "1",
     ...
    "customer_id": "018ED64348C27210A98E3DACBE47C4EF",
    ...
  }

How to reproduce

1. A customer logs in via store-api.account.login
2. The customer add at least one product to the cart store-api.checkout.cart.add
3. The customer logs out via store-api.account.logout
4. The customer logs in again.
5. Cart is empty

[shopware-issue-bot]

We found the following existing issues which may help or are related to your topic:

• Cart lost on log-in
• Saving the customer cart after logout for the next login does not work in 6.3.4.1
• Registered customers: products previously placed in the shopping cart are gone after logging in again
• no customer id in the cart table after login
• Products in Shopping Cart deleted after logout
• Cart Persistence
• Cart Persister - Deletes cart on update before inserting it again - Serious issue in headless environment due to conccurency
• CartService deletes wrong cart
• Original carts missing in CartMergedEvent

[jmatthiesen81]

The issue is already known https://issues.shopware.com/issues/NEXT-35111. @shyim implemented a fix and released a new version of the security plugin fixing this issue (https://store.shopware.com/en/swag136939272659f/shopware-6-security-plugin.html see changelog). The fix will be also included in the next Shopware release.

[shyim]

fix is merged, 7dcf5ab
we are waiting for a bugfix that theme compile is not executed when you use subbundles to make a release

[shyim]

6.5 version has been released