Active Sessions

The Sessions interface provides security visibility into all active web browser and mobile app sessions authenticated to your account and project.

---

1. Managing Active Sessions

1. Navigate to Project Settings → Sessions (or Account Settings).
2. Review the list of active sessions:
   • IP Address & Location: Identifies the client network address.
   • Device & Browser User-Agent: Displays device type (e.g. Chrome on Linux, Android App).
   • Last Active Timestamp: Shows recent activity recency.
3. Revoke Session: Click Revoke next to any session to immediately terminate authentication tokens for that client.

---

💡 Developer Architecture Note: JWT & Redis Token Blacklisting

Session revocation immediately adds the session identifier to a distributed Redis token blacklist, invalidating subsequent REST API bearer tokens instantly across all microservices.

---

Next Steps

• Create non-user API keys for background scripts in Access Tokens.
• Configure user access boundaries in Roles & Permissions.