Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature request] Logout all users / specific user from all device #1245

Open
lcharette opened this issue Mar 10, 2024 · 0 comments
Open

[Feature request] Logout all users / specific user from all device #1245

lcharette opened this issue Mar 10, 2024 · 0 comments
Labels
core feature request Feature request security Framework security issue V5
Milestone

Comments

@lcharette
Copy link
Member

See #1112. There's is a valid need to be able to logout a specific user, or all user for that matter, from all logged in devices/browser. It's not as simple as removing the "remember me" token in the persistence table. The PHP session also needs to be voided.

Note that calling logout as proposed in #1112 doesn't work, as a) it will void the current user session (can't work to force logout another user) and b) the session from a second browser won't be invalidated.

This function could be available in the admin panel as a button the root user can use to do it manually, or for security measure when modifying a password as described in #1112.

@lcharette lcharette added core feature request Feature request security Framework security issue V5 labels Mar 10, 2024
@lcharette lcharette added this to the 5.2.0 milestone Mar 10, 2024
@lcharette lcharette modified the milestones: 5.2.0, 5.3.0 Apr 14, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
core feature request Feature request security Framework security issue V5
Projects
Status: Not Started
Development

No branches or pull requests

1 participant