Repository navigation
[FEATURE] Sessions management/disconnect #620
Description
Hi @steveiliop56 ! :)
I'm proposing here a small improvement for session management.
Is your feature request related to a problem? Please describe.
Once logged-in, there is, as far as I know, no centralised interface to manage all currently active sessions.
I experienced this need and thought about it when I logged-in on one of my apps from one of our intern's computer.
But I then realised, when things were done, that I systematically needed to come back to his computer to end the session, and could not do it remotely.
Describe the solution you'd like
Would it be possible to have a panel like under, with the possibility to log-out active sessions from (i) our ID (if we are a normal user) (ii) all IDs (if we are an administrator) ?
I tried creating a mockup hereunder for inspiration. A browser/OS icon could even be added (based on user-agent) between "Username" and "Last seen date", to understand on what device the session is opened (I didn't add it in this mockup).
Explanation:
- Admin can view and disconnect all sessions
- Users can only view their own sessions
- If a user is managing his own session and setup OTP for login, he also needs to enter his OTP to logout (to not be locked out if someone has access to one of his active session on another computer and wants to log him out).
Describe alternatives you've considered
Go back to each computer on which I opened a session (or restart the container) to log-out active sessions on other computers.
Additional context
N/A.
Many thanks in advance for your kind consideration ! :)
Activity
steveiliop56 commentedon Feb 5, 2026
@TtuxX, I can't help saying that this design you came up with looks really really good. I could see this feature being useful indeed, especially now where the server can invalidate sessions. I am thinking that the first user could be the 'admin' which can logout all users and each user can logout their other sessions. This will be a really good feature for the next version of Tinyauth (after v5).
github-actions commentedon Mar 8, 2026
This issue has been inactive for 30 days and will be marked as stale.
github-actions commentedon Apr 8, 2026
This issue has been inactive for 30 days and will be marked as stale.
casperghst42 commentedon Sep 22, 2026
This is the solution to a problem I'm facing. I need a simple way to end the oidc session (pocket-id) when I logout from tinyauth.
I can manually call /api/oidc/end-session, but it is cumbersome and probably someting I would forget to do. Also there is the chance that one forget on a public computer ...
steveiliop56 commentedon Sep 24, 2026
@casperghst42 this is not the feature you are looking for. See #1094