search

cinema6 / proshop

Cinema6 provisioning and administrative system
0 stars 0 forks source link

Use new endpoint for logging out all user's sessions #55

Closed leichter closed 9 years ago

leichter commented 10 years ago

The user service was just updated with a new endpoint, POST /api/account/user/logout/:id, which will delete all of a user's active sessions. You can read more about it in cinema6/cwrx#261.

Proshop should start using this in two places:

  1. When deleting a user, proshop should also make a call to this endpoint with the user's id. This will ensure that the user is fully shut out of the system.
  2. Proshop should have some button that lets us lock down/freeze a user. This should first call PUT /api/account/user/:id and set the user's status to 'inactive', and then call POST /api/account/user/logout/:id to delete their active logins. Clicking the button should probably bring up some prompt with a warning message explaining that this will log the user and render them unable to make any requests.

@sqmunson CC: @howardengelhart

sqmunson commented 10 years ago

@leichter Thanks, yeah, I saw your cwrx PR. Sounds good!