Repository navigation
[FEATURE] Sessions management/disconnect #620
Description
Activity
@TtuxX, I can't help saying that this design you came up with looks really really good. I could see this feature being useful indeed, especially now where the server can invalidate sessions. I am thinking that the first user could be the 'admin' which can logout all users and each user can logout their other sessions. This will be a really good feature for the next version of Tinyauth (after v5).
Reacted by TtuxX and kimlleeReacted by TtuxXThis issue has been inactive for 30 days and will be marked as stale.
This issue has been inactive for 30 days and will be marked as stale.
This is the solution to a problem I'm facing. I need a simple way to end the oidc session (pocket-id) when I logout from tinyauth.
I can manually call /api/oidc/end-session, but it is cumbersome and probably someting I would forget to do. Also there is the chance that one forget on a public computer ...
Reacted by TtuxXReacted by TtuxX@casperghst42 this is not the feature you are looking for. See #1094
Reacted by Casper
Hi @steveiliop56 ! :)
I'm proposing here a small improvement for session management.
Is your feature request related to a problem? Please describe.
Once logged-in, there is, as far as I know, no centralised interface to manage all currently active sessions.
I experienced this need and thought about it when I logged-in on one of my apps from one of our intern's computer.
But I then realised, when things were done, that I systematically needed to come back to his computer to end the session, and could not do it remotely.
Describe the solution you'd like
Would it be possible to have a panel like under, with the possibility to log-out active sessions from (i) our ID (if we are a normal user) (ii) all IDs (if we are an administrator) ?
I tried creating a mockup hereunder for inspiration. A browser/OS icon could even be added (based on user-agent) between "Username" and "Last seen date", to understand on what device the session is opened (I didn't add it in this mockup).
Explanation:
Describe alternatives you've considered
Go back to each computer on which I opened a session (or restart the container) to log-out active sessions on other computers.
Additional context
N/A.
Many thanks in advance for your kind consideration ! :)