Why unlimited logins can become a hidden business logic vulnerability.

Imagine This Scenario

A user logs into your application from their laptop.

A few seconds later, the same account logs in from another browser.

Then another device.