Sessions

The Sessions page is used to monitor which users are currently connected to the system, which application they are using, when their session will expire, and allows administrators to log them out (kill the session).

This feature is mainly used for:

Security monitoring (unknown IP addresses or suspicious activity)
Forced logout (ban, access revocation, or compromised account cases)
Checking active connections
Session system debugging

What does this feature do?

Displays a list of live active sessions (currently logged-in or connected users)
Shows the session expiry time (when the user may be automatically logged out)
Displays the status (Authenticated vs Guest)
Shows the IP address for audit and security tracking
Allows administrators to terminate a single user session
Allows administrators to terminate all sessions using Kill All

Where can this feature be used?

1) Stopping Suspicious Activity

When a login/session appears from an unknown IP address
When the same user has multiple sessions running
When brute force or spam attempts are suspected

In these situations, administrators can instantly terminate the session to stop access.

2) License / Subscription Enforcement

Force logout when a user’s plan expires
Revoke active sessions after a user is banned
Emergency logout if an account is compromised

3) Maintenance / Emergency Situations

Reset sessions during server maintenance
Use Kill All to log out all users during a security incident

UI Flow

1) Page Header

Title: Sessions
Subtitle: Active user connections across all apps

In desktop view, a badge on the right side displays the number of active sessions (example: “10 Active”).

2) Controls (Search + Kill All)

A) Search Sessions

Typing in the search box filters the list in real time
The filter works based on the username or credentials

B) Kill All

Button: Kill All
A confirmation prompt appears when clicked
After confirmation, all sessions are terminated (all users are logged out)

3) Success Message

When an action is successfully performed (kill one session or kill all sessions), a success message appears at the top of the page.

4) Desktop View (List/Table)

On desktop, sessions are displayed in a table/list layout with the following columns:

User (username + session ID)
Application (application name)
Expires (expiry date/time)
Status (Authenticated / Guest)
IP Address
Action (Kill)

Clicking the IP badge may toggle a “revealed” state if the IP is blurred or masked using CSS.

5) Mobile View (Cards)

On mobile devices, the same data is displayed as cards:

User + Application
Status badge
IP badge
Expiry time
Kill button

6) Search Filter Script

When typing in the search box, the text of each session row is compared:

If a match is found → the row remains visible
If no match is found → the row is hidden

This helps administrators quickly locate a specific user's session.

Sessions

Sessions#

What does this feature do?#

Where can this feature be used?#

1) Stopping Suspicious Activity#

2) License / Subscription Enforcement#

3) Maintenance / Emergency Situations#

UI Flow#

1) Page Header#

2) Controls (Search + Kill All)#

A) Search Sessions#

B) Kill All#

3) Success Message#

4) Desktop View (List/Table)#

5) Mobile View (Cards)#

6) Search Filter Script#

Sessions

What does this feature do?

Where can this feature be used?

1) Stopping Suspicious Activity

2) License / Subscription Enforcement

3) Maintenance / Emergency Situations

UI Flow

1) Page Header

2) Controls (Search + Kill All)

A) Search Sessions

B) Kill All

3) Success Message

4) Desktop View (List/Table)

5) Mobile View (Cards)

6) Search Filter Script