Skip to content
omnismith docs

Active Sessions

The Sessions interface provides security visibility into all active web browser and mobile app sessions authenticated to your account and project.

1. Managing Active Sessions

Section titled “1. Managing Active Sessions”
  1. Navigate to Project Settings → Sessions (or Account Settings).
  2. Review the list of active sessions:
    • IP Address & Location: Identifies the client network address.
    • Device & Browser User-Agent: Displays device type (e.g. Chrome on Linux, Android App).
    • Last Active Timestamp: Shows recent activity recency.
  3. Revoke Session: Click Revoke next to any session to immediately terminate authentication tokens for that client.

Active session list interface with device details and revoke action

💡 Developer Architecture Note

Section titled “💡 Developer Architecture Note”

[!NOTE] JWT & Redis Token Blacklisting: Session revocation immediately adds the session identifier to a distributed Redis token blacklist, invalidating subsequent REST API bearer tokens instantly across all microservices.

Next Steps

Section titled “Next Steps”

[!TIP]