Session Management
Monitor and control active login sessions across devices.
Overview
Access session management from the security page to:
- View all active sessions
- Monitor activity and locations
- Remotely logout from devices
Viewing Sessions
Each session shows:
- Device and browser info
- Operating system
- Location (city-level, GDPR-compliant)
- First login time
- Current session indicator
Managing Sessions
Logout from Session
- Navigate to security page
- Find session to terminate
- Click "Logout Device"
- Confirm
Info: Immediate Session Logout
Session logout is immediate. The device must re-authenticate to regain access.
Session Information
Location
Location estimated from IP address (last octet removed for GDPR compliance):
- City-level approximation
- Identifies unusual login locations
Device Details
- Browser name and version
- Operating system and version
Token Types
Access Tokens
- Short-lived (15-60 minutes)
- Authorize API requests
- Include in Authorization header
Refresh Tokens
- Long-lived (days to weeks)
- Obtain new access tokens
- Store securely
Token Refresh
http
POST /v1/auth/refresh
Content-Type: application/json
{
"refreshToken": "your-refresh-token"
}Response:
json
{
"accessToken": "new-access-token",
"refreshToken": "new-refresh-token",
"expiresIn": 3600
}Both tokens rotate for security.
API Reference
Get Current User
http
GET /v1/auth/me
Authorization: Bearer <access-token>Validate Session
http
GET /v1/auth/validate
Authorization: Bearer <access-token>List Sessions
http
GET /v1/auth/sessions
Authorization: Bearer <access-token>Query Parameters:
includeExpired(optional): Set totrueto include expired sessions
Logout Session
http
POST /v1/auth/sessions/{sessionId}/logout
Authorization: Bearer <access-token>Warning: Bearer Token Required for Session Management
API keys cannot be used for session management operations. A Bearer token is required.
Info: Full API Documentation Available
These are example requests. For complete API documentation including all parameters, response schemas, and authentication details, visit api.cloudpirates.io/docs.