feat: add session management page (list active sessions + revoke)#4841
Open
daniloneto wants to merge 1 commit into
Open
feat: add session management page (list active sessions + revoke)#4841daniloneto wants to merge 1 commit into
daniloneto wants to merge 1 commit into
Conversation
Add a new settings page under Settings > Sessions that shows all active and expired login sessions with user info, IP address, device, and an option to revoke (force logout) any session. Backend: - listSessions: adminProcedure that returns sessions joined with user data, ordered by creation date - revokeSession: adminProcedure that deletes a session by ID (blocks self-revocation) Frontend: - New /dashboard/settings/sessions page with ShowSessions component - Sessions table with user, IP, device, timestamps, and revoke action - Sidebar link under Users (gated by member.read permission) Tests: - Input validation tests for revokeSession schema
dosubot
Bot
added
size:L
AminDhouib
added a commit
to DevinoSolutions/dokploy-community
that referenced
this pull request
Jul 18, 2026
port: feat: add session management page (list active sessions + revoke) (upstream Dokploy#4841)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a new Settings → Sessions page that shows all active and expired login sessions with user information, IP address, device, and timestamps. Admins can revoke (force logout) any session except their own.
Changes
Backend (
apps/dokploy/server/api/routers/user.ts)listSessions—adminProcedurequery that returns sessions joined with user data (email, name), ordered by creation date. Marks the current session withisCurrent.revokeSession—adminProceduremutation that deletes a session by ID. Guards against self-revocation with a clear error message.Frontend
/dashboard/settings/sessions— new settings page withShowSessionscomponentDialogAction)member.readTests
revokeSessionZod schema (valid id, missing field, wrong type)Screenshots
(Screenshots from a running instance can be added — the feature is already deployed and tested on v0.29.11)
Security
adminProcedure)member.readfor sidebar visibility)Closes # (no related issue — new feature)