Closed gregfrasco closed 6 years ago
We should also add a GET /sessions/my
endpoint so we can get a list of that users sessions.
Thanks for adding the session/my
support. Is this ready for a final review? Are you planning on adding anything else?
@jedireza This one is done. If I add another feature, I'll open another pull request.
In relation to #180
You can have multiple session. You the same session on the same device with the same ip is not deleted and re issued, it is simply return back. User revoke there sessions. I am not sure if I did this correctly. Admin can revoke any session.
Possible Issue: You could revoke your own session and be locked out, until you login onto another system an un-revoke that session. What are your thoughts on this?