[Bug]: Signing in the wrong user when authenticating through a generic OAuth provider

[nangelov-eti]

Is there an existing issue for this?

• I have searched the existing issues

Current Behavior

User B is signed in as User A, causing incorrect user authentication.

Expected Behavior

User B should be signed in as themselves after authenticating via the OAuth provider, not as User A.

Steps to reproduce

1. Set up a generic OAuth provider.
2. Sign in using the OAuth provider with User A.
3. Open an incognito window and attempt to sign in with User B using the same OAuth provider.
4. Observe that User B is signed in as User A instead of their own account.

Environment

Lowcoder version 2.4.10 is affected, but it's likely that the issue also impacts the latest version.
mode: ENTERPRISE

Additional Information

We use Keycloak as the OAuth provider to authenticate across multiple Keycloak realms. However, since Lowcoder doesn’t support multiple Keycloak providers, we had to configure separate generic OAuth providers, each representing a different Keycloak realm.