I found the post which mentions that session ids are never purged, which then led me to ask: is there a limit on the number of session ids a single user can have? I'm currently integrating tmdb login into my app and noticed on the sessions screen that when i login/logout multiple times the session id is not getting cleared.
Can't find a movie or TV show? Login to create it.
Want to rate or add this item to a list?
Not a member?
Reply by Travis Bell
on October 20, 2015 at 11:05 AM
Hi Umair,
Sessions are not deleted, indeed. The idea would be that you only create 1 session per user/device.
I could add a "logout" method that destroys the session. No one has brought this up until now ;)
Reply by Umair
on October 20, 2015 at 11:30 AM
Hey Travis!
I think that would be a good idea. From a developer stand point, it does not really make much difference to me since I would be clearing the session id from the app and "imitating" a logout. But the architect in me wants to make sure that the session is deleted from the backend since it could still allow access to the user's account if someone somehow got access to that session id. Plus it would make the sessions page look much cleaner when I go to see how many sessions are active for my API key :).
Reply by Umair
on October 22, 2015 at 11:20 PM
So... wondering if you're planning on adding a logout method? :)
Reply by xarxer
on February 19, 2016 at 5:50 AM
I'd also like to see this. I would also like to be able to invalidate sessions created using my api key from the control panel. Cheers! :)
Reply by Travis Bell
on February 29, 2016 at 9:36 AM
I've created a new ticket for this here. I'll try to look at it in the next few months.
Cheers.
Reply by Travis Bell
on July 24, 2018 at 12:46 PM
Hi guys,
There is now a method to delete session ids. You can read about it here.