User session managment and audit

[lafriks]

All authorized user sessions should be stored in database.
Sessions table should contain data:

• Session ID
• User ID
• User IP address
• Session creation time (authorization time)
• Last request/access time
• Logout time (or session timeout time)

[lafriks]

@cezar97 label feature is for everything that gitea currently does not have :) but yes this is something that would be needed to fix your mentioned issue. And also to add option to logout all user sessions when he changes password for example

[lunny]

So if this will also fix #8 ?

[lafriks]

@lunny no, this is just authorization audit log but this could be requirement for that

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[adelowo]

I'd try to work on this during the weekend.

@lafriks Do you have an idea of what the UI is supposed to look like? Just a regular table :)

[lafriks]

something like user list table in admin UI

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs during the next 2 weeks. Thank you for your contributions.

[bendem]

Should also store the user agent. I find it really helps users when you can tell them which browser the session was created from. Much more than providing their IP.