1. App
Authvaultix
  • Getting Started
  • Overview
    • Security Practices
    • SDK & Code Examples
    • ? QnA
    • rate limiting
  • Dashboard
    • Manage Applications
    • Account Settings
      • Settings
      • Billing History
      • Login History
      • Notifications
      • Keyboard Shortcuts
      • Preferences
      • Forms
      • Bug Bounty
    • Seller
      • Team Member
      • Seller Keys
      • Seller Logs
    • App
      • Licenses
      • Users
      • Token
      • Subscriptions
      • Chats
      • Sessions
      • Webhook
      • Files
      • Global Variables
      • User Variables
      • Logs
      • Blacklists
      • Whitelists
      • Audit Logs
      • Web Loader
      • Tamper Log
  • API
    • initialization
      • init
    • Authentication
      • Login
      • register
      • License Login
      • Forgot Password
      • OTP Verify
      • Logout
      • Change Username
    • Sessions
      • Session Check
      • Fetch Online
    • Licensing
      • Upgrade Access
    • Users
      • Get User Variable
      • Set User Variable
      • Global Variable
      • Ban User
      • Check Blacklist
    • Files
      • Download File
    • Chat
      • Send Message
      • Fetch Messages
    • Webhooks
      • Webhook
    • Security
      • Tamper Detection
  • Seller API
    • Seller Key
      • Validate Seller Key
    • Users
      • User Variable
        • Retrieve User Variables
        • Set User Variable
        • Edit User Variable
        • Delete User Variable
        • Delete Variables By Name
        • Delete All User Variables
        • Retrieve User Subscriptions
      • Add HWID User
      • Create User
      • Delete User
      • Delete All Users
      • Delete Expired Users
      • Retrieve Users
      • Verify User
      • Check User Exists
      • Ban User
      • Unban User
      • Change Username
      • Change Password
      • Extend User Expiry
      • Pause User
      • Unpause User
      • Reset User HWID
      • Reset All User HWID
      • Subtract User Time
    • Session
      • Get Active Session Count
      • Get Sessions
      • End Single Session
      • End All Sessions
      • Kill Session By IP
    • Log
      • Get Logs
      • Delete All Logs
      • Delete Logs By IP
    • Subscription
      • Create Subscription
      • Delete Subscription
      • Edit Subscription
      • Edit Subscription Copy
    • Global Variable
      • Create Global Variable
      • Delete All Global Variables
      • Delete Global Variable
      • Edit Global Variable
      • Get Global Variable
      • Get All Global Variables
    • Reseller & Manager
      • Get Managers
      • Create Reseller
      • Delete Reseller
      • Edit Reseller
      • Get Reseller Information
      • Get All Resellers
      • Delete Manager
    • License
      • Generate License Key
      • Delete License Key
      • Delete All Unused License Keys
      • Delete All Used License Keys
      • Delete Used License Keys
      • Export License Keys
      • Export Unused License Keys
      • Export Used License Keys
      • Extend License Expiry
  1. App

Sessions

Active Sessions Management#

Sessions page provides full management for real-time active user connections, connected device details, and session termination controls.#

What are Sessions?#

Sessions represent active authenticated connections between client applications and the AuthVaultix server.
The session lifecycle operates in three primary stages:
1.
Session Initialization: On client app startup an init API call is made and a unique session string is generated.
2.
Session Validation: When the user logs in or completes license activation the session is marked Validated and bound to the user account and HWID.
3.
Session Termination: A session ends when the app calls logout on exit, when an expiration timer elapses, or when the session is terminated via the dashboard or seller API.

Session Identification Parameters#

The dashboard session list displays the following details for each active connection:
Parameter FieldDescriptionExample
Session IDUnique cryptographic connection string.sess_8947291048291048
User CredentialUser account name ya bound license key.luffy_dev
IP AddressConnected client IP address.152.58.135.231
Hardware ID (HWID)Bound machine hardware signature hash.58C1-C9C4-385B-62E3
Last Active TimeLast API request validation timestamp.2 Minutes ago

Single Session vs Emergency Kill All#

The dashboard provides two session termination options:
1.
Kill Single Session (kill_one):
Inspect a specific user connection and click the red Kill button on that row.
After confirming the action the specific session_id is removed from the database and the client's next request is immediately blocked.
2.
Kill All Sessions (kill_all - Emergency Kill Switch):
Click the Kill All button in the top header to terminate all active users for the selected application at once.
Confirmation Alert: "Are you sure you want to kill ALL sessions? This will logout everyone."
Use this during security incidents or major deployments to force an immediate logout for all users.

Unique Sessions & Auto-Logout Best Practices#

Unique Session Constraint: Only one application session per machine is allowed. If a user restarts the application without gracefully logging out, the new session will automatically overwrite the old session to prevent session spamming.
Developer Best Practice (logout): Developers should call the logout API on application close events so server resources are released gracefully.

Search & UI Controls#

Active Sessions Counter Badge: The top header counter badge displays the live active connection count (count($sessions)).
Live Search Filtering (#searchBox): Use the search input to filter list items by Username, IP Address, HWID, or Session ID.
Mobile Responsive Layout: The UI adapts to mobile with compact session cards for smaller screens.
Modified at 2026-07-30 15:22:10
Previous
Chats
Next
Webhook
Built with