Security Sessions
Active sessions
Devices signed in to your account. Revoke anything you don't recognize.
| Device | IP | Location | Status | |
|---|---|---|---|---|
| Chrome · macOSCurrent | 73.11.x.x | San Diego, US | This device | |
| Safari · iPhone | 73.11.x.x | San Diego, US | Active | |
| Firefox · Windows | 98.22.x.x | Austin, US | Active | |
| Chrome · Linux | 45.9.x.x | Unknown | Reuse detected |
About this page
Every device currently signed in to your account: where, when, and on what. Anything unfamiliar can be signed out remotely with one click — and that session’s access ends immediately, everywhere.
Behind this page/security/sessions · authenticated
Retrieve
sp_Builder_ListMySessions returns device, IP, location, and last-seen for the signed-in user.Save
Sessions are issued/rotated bysp_Auth_RegisterSession / sp_Auth_UseRefreshSession; reuse is caught by sp_Auth_HandleRefreshReuse.Success
- Reuse revokes the whole token family.
- Current session is flagged and non-revocable here.
- Revoke-all keeps the current session.
CLI handoff
Implement this scaffold from the structured contract, then remove hard-coded preview rows. The source of truth is CLI Handoff and admin-cli-manifest.json.
Page IDactive-sessions
Route/security/sessions
Accessauthenticated
Statusschema-backed-scaffold
Server-inject identity and scope values; never trust browser-supplied account, app, tenant, user, entitlement, price, or permission identifiers. Preserve the loading, empty, forbidden, failed, retrying, and completed states shown by the preview.