Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Existing Trusted Agents #4

Open
dwasyl opened this issue Aug 8, 2020 · 2 comments
Open

Existing Trusted Agents #4

dwasyl opened this issue Aug 8, 2020 · 2 comments

Comments

@dwasyl
Copy link

dwasyl commented Aug 8, 2020

Is there anyway to determine if a user has existing trusted agents out there? I know you can revoke the trust for the current agent, or all agents, but to clean up a UI, I was hoping to be able to indicate if the user had any trusted devices to revoke.

Based on the fact that it's set as a cookie and not necessarily stored on the server or in the server-side session, I suspect this isn't possible but wanted to ask.

@psagers
Copy link
Member

psagers commented Aug 9, 2020

You're correct, agents are not automatically tracked in the database. It should be easy to do yourself, maybe with a bit of middleware.

@dwasyl
Copy link
Author

dwasyl commented Aug 9, 2020

Makes sense - logically speaking would the best place to connect be with the session? I can already tie sessions to a user, and presumably, if a user is forgetting trusted agents, the sessions associated with those agents should be invalidated as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants