[ZBXNEXT-2815] Add possibility to invalidate 'passive' sessions Created: 2015 May 15  Updated: 2022 Jun 27

Status: Open
Project: ZABBIX FEATURE REQUESTS
Component/s: API (A), Frontend (F)
Affects Version/s: 2.4.4
Fix Version/s: None

Type: New Feature Request Priority: Trivial
Reporter: Fernando Schmitt Assignee: Unassigned
Resolution: Unresolved Votes: 12
Labels: login, logout, sessions
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified
Environment:

CentOS x64


Issue Links:
Causes
Duplicate
is duplicated by ZBXNEXT-7566 One session per user object Closed

 Description   

Say you have logged in many times using different browsers/machines, without logging out. You'll have all these sessions marked as active (status=0), but they are still valid. I'd like to invalidate previous sessions by having an option that will delete records from table sessions with my userid and status=0. Of course, this option must only be available for the current 'active' session (status=0).



 Comments   
Comment by Oleksii Zagorskyi [ 2015 May 16 ]

In issue description you are wrong that status=0 means sessions marked as passive

Correct is:

0, ZBX_SESSION_ACTIVE - session active
1, ZBX_SESSION_PASSIVE - session is not active
Comment by Fernando Schmitt [ 2015 May 18 ]

You are correct. Both sessions remain with status=0 (active). I can't edit the description, however. The correct description is the following: I'd like to delete all other active sessions with a sessionid different from my current one. I.e., force a 'logout' of a session I've lost the cookie.

Comment by Fernando Schmitt [ 2015 May 21 ]

Can you edit the description or should I create another issue?

Comment by Oleksii Zagorskyi [ 2015 May 21 ]

Your comment about corrections is enough.

Comment by dimir [ 2019 Nov 21 ]

Fixed.

Generated at Fri Apr 26 08:39:31 EEST 2024 using Jira 9.12.4#9120004-sha1:625303b708afdb767e17cb2838290c41888e9ff0.