Session key is incorrect when impersonating user leading to an expired session and logged out of both

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 7.1.X, 7.2.X, 7.3.X, Master
• Fix Version/s: 7.2.X, 7.3.X, 7.4.3.27 CE GA27, 7.4.3.28 CE GA28, Master
• Component/s: JS APIs and Utilities
• Labels:
  • ee-ts
  • liferay-fixpack-dxp-6-7310
  • liferay-update-dxp-27-7413
  • liferay-update-dxp-6-7310
• Branch Version/s:
  7.3.x, 7.2.x
• Backported to Branch:
  Committed
• Fix Priority: 3
• Git Pull Request: https://github.com/liferay-frontend/liferay-portal/pull/2219

Steps to Reproduce

1. In ROOT/WEB-INF/web.xml update the session-timeout to 2
2. In portal-ext.properties add session.timeout=2
3. Start up the portal
4. Create a new user
5. Impersonate the new user
6. Wait 1 minute and assert the original tab shows the session timeout warning
7. Perform an action on the second tab (impersonated user)
8. Wait 1 more minute

Expected Results
The user is still logged in on both tabs since they were taking actions as the impersonated user.

Actual Results
The user is logged out of both tabs and cannot perform any actions as the original or impersonated user.