PT-2026-105910

Impact The Vend OAuth2 backend used only the numeric Vend user id as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Vend user ID could collide in the social-auth association table. A user from one shop cou...