User session managment and audit #2512

New Issue

GiteaMirror · 2025-11-02T04:38:58-06:00

GiteaMirror commented

2025-11-02 04:38:58 -06:00

Originally created by @lafriks on GitHub (Nov 10, 2018).

All authorized user sessions should be stored in database.
Sessions table should contain data:

Session ID
User ID
User IP address
Session creation time (authorization time)
Last request/access time
Logout time (or session timeout time)

Originally created by @lafriks on GitHub (Nov 10, 2018). All authorized user sessions should be stored in database. Sessions table should contain data: * Session ID * User ID * User IP address * Session creation time (authorization time) * Last request/access time * Logout time (or session timeout time)

GiteaMirror added the type/feature issue/confirmed labels 2025-11-02 04:38:58 -06:00

GiteaMirror commented

2025-11-02 04:38:59 -06:00

@lafriks commented on GitHub (Nov 10, 2018):

@cezar97 label feature is for everything that gitea currently does not have :) but yes this is something that would be needed to fix your mentioned issue. And also to add option to logout all user sessions when he changes password for example

@lafriks commented on GitHub (Nov 10, 2018): @cezar97 label feature is for everything that gitea currently does not have :) but yes this is something that would be needed to fix your mentioned issue. And also to add option to logout all user sessions when he changes password for example

GiteaMirror commented

2025-11-02 04:38:59 -06:00

@lunny commented on GitHub (Nov 11, 2018):

So if this will also fix #8 ?

@lunny commented on GitHub (Nov 11, 2018): So if this will also fix #8 ?

GiteaMirror commented

2025-11-02 04:38:59 -06:00

@lafriks commented on GitHub (Nov 11, 2018):

@lunny no, this is just authorization audit log but this could be requirement for that

@lafriks commented on GitHub (Nov 11, 2018): @lunny no, this is just authorization audit log but this could be requirement for that

GiteaMirror commented

2025-11-02 04:38:59 -06:00

@stale[bot] commented on GitHub (Jan 10, 2019):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale[bot] commented on GitHub (Jan 10, 2019): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

GiteaMirror commented

2025-11-02 04:38:59 -06:00

@adelowo commented on GitHub (Feb 7, 2019):

I'd try to work on this during the weekend.

@lafriks Do you have an idea of what the UI is supposed to look like? Just a regular table :)

@adelowo commented on GitHub (Feb 7, 2019): I'd try to work on this during the weekend. @lafriks Do you have an idea of what the UI is supposed to look like? Just a regular table :)

GiteaMirror commented

2025-11-02 04:39:00 -06:00

@lafriks commented on GitHub (Feb 8, 2019):

something like user list table in admin UI

@lafriks commented on GitHub (Feb 8, 2019): something like user list table in admin UI

GiteaMirror commented

2025-11-02 04:39:00 -06:00

@stale[bot] commented on GitHub (Apr 9, 2019):

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

@stale[bot] commented on GitHub (Apr 9, 2019): This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

GiteaMirror commented

2025-11-02 04:39:00 -06:00

@bendem commented on GitHub (Mar 24, 2021):

Should also store the user agent. I find it really helps users when you can tell them which browser the session was created from. Much more than providing their IP.

@bendem commented on GitHub (Mar 24, 2021): Should also store the user agent. I find it really helps users when you can tell them which browser the session was created from. Much more than providing their IP.

GiteaMirror commented

2025-11-02 04:39:00 -06:00

@ghost commented on GitHub (Jun 27, 2025):

this is a very important security feature. please consider supporting it
@lunny

@ghost commented on GitHub (Jun 27, 2025): this is a very important security feature. please consider supporting it @lunny

Sign in to join this conversation.

Branches Tags

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github-starred/gitea#2512