Implements secure, database-backed session tracking and multi-device management for web applications.
This skill provides a comprehensive pattern for building robust authentication systems using database-backed sessions rather than standard cookie-only storage. It enables critical security features like session revocation, 'sign out from all devices' functionality, and detailed security audit trails for user activity. By leveraging cryptographically signed cookies and device-specific tracking, it helps developers implement professional-grade authentication workflows that support both web and API-based access while maintaining strict security standards such as HttpOnly and SameSite protection.
主な機能
01Database-backed session persistence for activity auditing
02Multi-device support with 'sign out everywhere' capability
03Secure cookie handling with HttpOnly and SameSite: Lax protection
04Integrated session revocation and expiry management
05Support for both browser sessions and Bearer token API authentication
060 GitHub stars
ユースケース
01Building a secure user authentication system with session history
02Implementing device management dashboards in user settings
03Creating security-sensitive applications requiring audit trails for all logins
