Sessions (Admin)

List Sessions

GET /api/v1/sessions

Returns active (and optionally revoked) user login sessions. Admin-only.

Query parameters:

Parameter	Type	Required	Default	Description
`user_id`	string (UUID)	No	--	Filter by user
`active_only`	string	No	--	If `true`, exclude revoked sessions

Response: 200 OK

{
  "sessions": [
    {
      "id": "uuid",
      "user_id": "uuid",
      "username": "admin",
      "ip_address": "192.168.1.100",
      "user_agent": "Mozilla/5.0...",
      "created_at": "2026-02-24T12:00:00Z",
      "last_seen": "2026-02-24T12:05:00Z",
      "revoked": false,
      "revoked_at": null
    }
  ]
}

Revoke Session

DELETE /api/v1/sessions/{sessionID}

Revokes a single session. Admin-only. Returns 204 No Content on success, 404 if not found or already revoked.

Revoke All User Sessions

DELETE /api/v1/sessions/user/{userID}

Revokes all active sessions for a specific user. Admin-only. Returns 204 No Content on success.