web sessions: list and revoke #83

closed cmc opened this on 2026-09-02 00:24 UTC · security · assigned to cmc · milestone v1.7.0

Discussion

cmc 2026-09-02 00:24 UTC

Web sessions last seven days and only the current one can be ended, through /logout. Disabling the account is the only way to drop the others.

Add web sessions list and web sessions revoke <id>, SSH-only, matching the token commands.

closed by commit 1941ec0174 by cmc: web sessions: list and revoke

2026-09-02 23:44 UTC

referenced in commit 4395ff1dd8 by cmc: Admin, Users: quotas, pending expiry, browser sessions

2026-09-05 06:30 UTC