jedireza/frame

Support multiple user sessions

jedireza opened this issue · 1 comments

Currently when we create a new session, we remove any other current sessions. This can get annoying if you want to stay logged in across devices (like on your phone and on your desktop).

  • The solution to this is to remove this cleaning step:
    clean: ['newSession', function (results, done) {
    const query = {
    userId,
    key: { $ne: results.keyHash.hash }
    };
    self.deleteOne(query, done);
    }]
  • We should extend the information stored on the session records too, like the user agent, last access time, ip address, etc... GitHub has something like this in Account Settings > Security.
    • screen shot 2017-10-20 at 11 47 13 pm
  • We should extend the user details admin screen, listing the current sessions, with the ability to remove/revoke them.
  • We should also extend the account settings page so users can manage their own sessions too.

Closed via #182