Skip to content
Snippets Groups Projects
Closed Auth: explicit session invalidation
  • View options
  • Auth: explicit session invalidation

  • View options
  • Closed Issue created by Warren Gifford

    Created by: beyang

    Provide an explicit session invalidation mechanism for Sourcegraph.

    Currently, sessions are invalidated after they expire (configurable via the auth.sessionExpiry option) or on user sign-out. Proposal is to also enable explicit session invalidation in the following scenarios:

    • An admin manually invalidates all sessions for a given user.
    • A user's existing sessions are invalidated after successful password reset or password change under built-in auth.
    • Session is not cleaned up after user log out (added by @unkwon)

    Activity

    • All activity
    • Comments only
    • History only
    • Newest first
    • Oldest first