koji

#3396 Simultaneous Session Logons
Closed: Fixed by tkopecek. Opened by jcupova.

Closed: Fixed
Reopen Issue

More info:
https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html#simultaneous-session-logons

Can we get a clearer statement of the issue?

Metadata Update from @mikem:
- Custom field Size adjusted to None

My idea is to add new API calls:
- listing all active session for user (same user / admin permission)
- ability to cancel other sessions

basically extending two calls:
* getSessionInfo(all=False, user=None) - return list if all=True (admin/owner), adding host_ip
* logout(session_id=None) - terminate session for other session_id (admin/owner)

Adding new web page listing active sessions (or just extend userinfo) with logout links.

PR 3446

Metadata Update from @tkopecek:
- Issue tagged with: testing-ready

Metadata Update from @jcupova:
- Issue set to the milestone: 1.31

Metadata Update from @jobrauer:
- Issue tagged with: testing-done

Commit 08a9fb88 fixes this issue

Commit 78976281 fixes this issue

Commit 1ece0d45 fixes this issue

This issue has been migrated to Fedora Forge:
https://forge.fedoraproject.org/koji/koji/issues/3396

Please continue any further discussion there.
Metadata
None

backlog testing-done testing-ready

None
None
Low
None
Related Pull Requests
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.