Session management per device
Open
complexity: large
feature: Login
role: Back End
size: 2pt
- Dominant language
- JavaScript
- Stars
- 61
- Forks
- 101
- PR merge metrics
- No merged PRs in 30d
Description
### Overview
User Story:
As a user, I want the system to recognize my device sessions so I can manage them.
### Action Items
Acceptance Criteria:
- [x] Backend stores refresh token metadata: device name (optional), IP, user agent, created_at, last_used_at.
- [ ] Endpoint to list active sessions returns metadata (not tokens).
- [ ] Endpoint to revoke a specific session invalidates its refresh token.
### Resources/Instructions
- This issue is part of the epic: #2065
Contributor guide
Assessment
This issue has not been assessed yet.