Caused by 🐛 Cacheability issue when using _consumer_id query in JsonApi responses. Needs work
// Allow HTTP proxies to cache pages for anonymous users without a session
// cookie. The Vary header is used to indicates the set of request-header
// fields that fully determines whether a cache is permitted to use the
// response to reply to a subsequent request for a given URL without
// revalidation.
if (!$response->hasVary() && !Settings::get('omit_vary_cookie')) {
$response->setVary('Cookie', FALSE);
}
This module is setting the vary, and then the cookie vary is not set.
Use varnish
Needs work
1.0
Code
The change is currently missing an automated test that fails when run with the original code, and succeeds when the bug has been fixed.
This needs tests to verify. Also, it turns out our situation was still broken. But this is highly likely to happen.