Learn how to manage concurrent active sessions, authorize concurrent devices, and remotely revoke sessions instantly.
A premium flat layout replacing outdated nested containers.
View sessions cleanly as separate card elements, improving scannability on both mobile and web browsers.
Spot the IP origin badge immediately on the card. Verbose User-Agent strings collapse neatly inside interactive 'details' toggles.
The active session is flagged with a 'This Device' tag, disabling the block/revoke buttons to prevent accidental self-lockouts.
Detailed explanation of approval buttons, remote revocation, and device status badges:
| UI Element / Button Name | UI Type | Purpose & Operation Details | Recommended Value / Format |
|---|---|---|---|
'This Device' Tag | Status Badge | Marks the current laptop or smartphone you are currently operating on. | Revoke button on this card is disabled to prevent self-lockout. |
'Pending' Tag | Status Badge | Status of a new device with correct password awaiting approval from a trusted device. | Orange badge. Content access is locked until approved. |
Approve Button | Button | Grant official authorization for a new device to access LAB HUB account. | New device immediately redirects to Dashboard. |
Reject Button | Button | Deny login request from unknown device and block access from that origin. | Recommended if you do not recognize IP or device name. |
Revoke (Remote Logout) | Button | Instantly logout account from a specific remote device in session list. | Remote device screen automatically redirects back to Login. |
Log out All Other Devices | Button | Immediately disconnect all other devices (keeping only 'This Device'). | Use when suspecting password compromise or lost phone. |
View User-Agent Details | Button | Expand detailed OS and browser version information string. | Example: Windows 11 64-bit, Chrome 124.0. |
Modern recognition securing users against IP-switching locks.
Registers a persistent UUID locally on your device. Changing networks (WiFi to 4G) maintains device trust without blocking access.
When there are no trusted devices registered (first-ever login or after password resets), the system trusts the first device automatically.
Subsequent concurrent logins from recognized but untrusted devices are held PENDING and locked until approved.
Secure, fast authorization for new concurrent devices.
Multiple pending attempts from a single IP are grouped into a single card showing the latest request, avoiding list clutter.
Approving a card authorizes the device and automatically purges older duplicates. Rejecting wipes all IP pending sessions in a single step.
Untrusted devices display the trust modal. The frontend fallbacks to polling every 3 seconds to trigger immediate dashboard redirects once approved.
Instant, real-time eviction of compromised devices.
Clicking Revoke broadcasts real-time WebSocket events. The remote device is immediately logged out and redirected to /login.
The target browser leverages standard BroadcastChannel to evict and log out all active tabs simultaneously.
System administrators can trigger 'Revoke All Devices' across all users, secured via Admin Step-Up Authentication.