Add session management (view/revoke active sessions)

[VictrixHominum]

Which feature are you enhancing?
User control over account access and session security

Why is this required?
Users access applications from multiple devices and locations, sometimes forgetting to log out. Without session management, compromised or forgotten sessions remain active indefinitely, creating security vulnerabilities. Giving users visibility and control over their active sessions enhances security and builds trust.

Any additional context?
Implementation Steps:

1. Enhance session data storage:

   • Extend Session model in Prisma schema with additional metadata
   • Add fields for IP address, user agent, device type, and location
   • Create last activity tracking mechanism
   • Implement unique session identifiers

2. Build session tracking system:

   • Create middleware to update session activity timestamps
   • Implement IP geolocation for location tracking
   • Add device and browser detection
   • Create session history logging

3. Develop session management API:

   • Create endpoint to list all active sessions for a user
   • Add endpoint to revoke specific sessions by ID
   • Implement "revoke all other sessions" functionality
   • Add session detail retrieval endpoint

4. Implement automatic session management:

   • Create configurable session timeout settings
   • Add scheduled job to expire inactive sessions
   • Implement sliding expiration for active sessions
   • Add max session lifetime regardless of activity

5. Build user interface components:

   • Create sessions list view with device details
   • Add session revocation controls
   • Implement confirmation dialogs for revocation
   • Add visual indicators for current session

6. Add security enhancements:

   • Implement suspicious login detection
   • Create notification system for new session creation
   • Add location-based anomaly detection
   • Implement session continuity validation to prevent hijacking