How is the \Magento\Security\Model\AdminSessionsManager::logoutOtherUserSessions() implemented and used?

dmitrii_fediuk · April 10, 2016, 9:11am

Implementation

magento/magento2/blob/052e789/app/code/Magento/Security/Model/AdminSessionsManager.php#L218-L238


/**
 * Logout another user sessions
 *
 * @return $this
 */
public function logoutOtherUserSessions()
{
    $collection = $this->createAdminSessionInfoCollection()
        ->filterByUser(
            $this->authSession->getUser()->getId(),
            \Magento\Security\Model\AdminSessionInfo::LOGGED_IN,
            $this->authSession->getSessionId()
        )
        ->filterExpiredSessions($this->securityConfig->getAdminSessionLifetime())
        ->loadData();


    $collection->setDataToAll('status', \Magento\Security\Model\AdminSessionInfo::LOGGED_OUT_MANUALLY)
        ->save();


    return $this;
}

The sole usage

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/Controller/Adminhtml/Session/LogoutAll.php#L34-L48


/**
 * @return void
 */
public function execute()
{
    try {
        $this->sessionsManager->logoutOtherUserSessions();
        $this->messageManager->addSuccess(__('All other open sessions for this account were terminated.'));
    } catch (\Magento\Framework\Exception\LocalizedException $e) {
        $this->messageManager->addError($e->getMessage());
    } catch (\Exception $e) {
        $this->messageManager->addException($e, __("We couldn't logout because of an error."));
    }
    $this->_redirect('*/*/activity');
}

github.com

magento/magento2/blob/052e789/app/code/Magento/Security/view/adminhtml/templates/session/activity.phtml#L52-L67


<div class="button-container">
    <button type="button"
        <?php
        if ($block->areMultipleSessionsActive()): ?>
            data-mage-init='{"confirmRedirect":{
                "message": "<?php
            /* @escapeNotVerified */ echo __('Are you sure that you want to log out all other sessions?') ?>",
                "url":"<?php /* @escapeNotVerified */ echo $block->getUrl('security/session/logoutAll') ?>"
            }}'
        <?php
        else: ?>disabled<?php
        endif ?>
        title="<?php /* @escapeNotVerified */ echo __('Log out all other sessions') ?>">
        <?php /* @escapeNotVerified */ echo __('Log out all other sessions') ?>
    </button>
</div>

dmitrii_fediuk · April 10, 2016, 9:16am