boj/redistore

Delete all sessions by user

Opened this issue · 2 comments

So, I want to give my users the ability to sign out of all other devices. Is that something I could do with this software, or would I need to make my own solution?

ptman commented

If you don't want to give your users the ability to pick which sessions they want to sign out of, you could store a session token in the user data in the database. And only consider sessions that contain the session token to be valid. Then you can sign out all but the current session by changing the session token in the database and the current session. All the other sessions will no longer be valid.

same issue