User — Sessions USR-04
See and revoke a user's sessions.
| Who can use it | users.manage |
|---|---|
| Where it is | /admin/users/:userId/sessions · link: https://hub.substratalapps.com/admin/users/:userId/sessions or substratal://admin/users/:userId/sessions |
| Available on | Web (PWA), iOS / iPadOS, Android, Windows, Linux (GNOME), macOS |
| Phase | MVP |
What you can do here
- Revoke
- Sign out everywhere — Confirm (COPY "Sign out everywhere (staff)"). 200
{revoked}→ toast; the list empties. Their account stays active.
Related guides
- Managing users and their access — Find people, invite them, turn app access on and off, and understand why someone can or can't get in.
On your platform
| App | Status | How it's built |
|---|---|---|
| Web (PWA) | — | tabpanel (route segment) |
| iOS / iPadOS | — | Segment content |
| Android | Planned | Tab content |
| Windows | — | SelectorBar item content |
| Linux (GNOME) | — | AdwViewStack page |
| macOS | — | Tab content inside detail |
Status is reported by each app's repository; — means that app doesn't report it yet.
For developers: API calls
| Method | Path | What it does |
|---|---|---|
| GET | /users/{id}/sessions | List active sessions (self or users.manage) |
| POST | /users/{id}/sessions/revoke-all | Revoke every session (self or users.manage) |
| DELETE | /users/{id}/sessions/{sessionId} | Revoke one session |
Every call sends Substratal-Version: 1. Paths are at the host root, with no /v1.