Consider adding client-specific information to session data

[ianwalter]

trafficstars

This would allow an application to provide their users with an overview of their active sessions, like GitHub does in Settings > Security.

Data could include:

• IP Adress
• Location
• Browser
• Operating System
• Sign in timestamp

[qur2]

Hi,

Looking into your project and I'm wondering if you already thought about an approach for that? I'm very not familiar with redis and right now I thought about stringifying a json representation of the data and use it to sign the token. That's way hacky :)

[ianwalter]

Hi, sorry for the late response, I was planning to save a JSON string to Redis with each session object.

[qur2]

Hi, no problem. For now, my project doesn't need redis so I'm storing session in DB. I'll keep in mind your recommendation to easily migrate if need be.