Skip to content

Offer ability to sign someone out of all sessions#24226

Merged
sgiehl merged 15 commits into5.x-devfrom
signoutsessions
Mar 23, 2026
Merged

Offer ability to sign someone out of all sessions#24226
sgiehl merged 15 commits into5.x-devfrom
signoutsessions

Conversation

@tsteur
Copy link
Member

@tsteur tsteur commented Mar 14, 2026

Description

fix #22198
As a super user, you need to have the ability to sign someone out of all sessions for security reasons. For example if a device was lost or compromised.

Checklist

  • [✔] I have understood, reviewed, and tested all AI outputs before use
  • [✔] All AI instructions respect security, IP, and privacy rules

Review

@tsteur tsteur added this to the 5.9.0 milestone Mar 14, 2026
Copy link
Member

@sgiehl sgiehl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested locally. Works as expected. Left some comments for possible improvements.

@sgiehl sgiehl added the c: Security For issues that make Matomo more secure. Please report issues through HackerOne and not in Github. label Mar 16, 2026
Copy link
Member Author

@tsteur tsteur left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sgiehl added the password confirmation and not showing the icon for invited users 👍

@tsteur
Copy link
Member Author

tsteur commented Mar 21, 2026

@sgiehl tests should pass now

Copy link
Member

@sgiehl sgiehl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Spotted one last issue. Afterwards this should be good to merge.

@sgiehl sgiehl enabled auto-merge (squash) March 23, 2026 14:51
@sgiehl sgiehl merged commit 601cc9a into 5.x-dev Mar 23, 2026
50 of 51 checks passed
@sgiehl sgiehl deleted the signoutsessions branch March 23, 2026 15:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

c: Security For issues that make Matomo more secure. Please report issues through HackerOne and not in Github.

Development

Successfully merging this pull request may close these issues.

Offer ability to sign someone out of all sessions

2 participants