id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
34571	Request with invalid session after concurrent logout or session timeout is considered a BadRequest	Daniel Nunes	nobody	"When working with multiple tabs, if a user logs out or his session times out, any concurrent request happening in another tab will be considered a bad request. See the {{{SessionInterrupted}}} [https://github.com/django/django/blob/e1bbbbe6acb69e755554088bc573cc1835673209/django/contrib/sessions/middleware.py#L63-L67/ exception raised].


I see that [https://github.com/django/django/pull/13395#pullrequestreview-484706827/ @carltongibson was slightly worried about the status code] and I feel the same. This for me should be handled as **forbidden** ({{{SessionInterrupted}}} being a subclass of {{{PermissionDenied}}}) because the request is actually well-formed, but it's not allowed anymore.

What do you think?"	Uncategorized	new	contrib.sessions	3.2	Normal		session, session bad request		Unreviewed	0	0	0	0	0	0