You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
While testing how OAuth sessions are reflected in the Personal > Security settings section after owncloud/core#28879, and given the nature of how the same clients will be used across multiple devices to connect to an account via OAuth, I was wondering if a more fine-grained device/session control could be implemented.
Per application
What is implemented already: to revoke whole apps from further accessing an account - e.g. twitter or from StackExchange settings:
Per device/session
It'd also be interesting from an user point of view to be able to revoke access to individual devices/sessions - e.g. in case of loss - rather than all the clients sharing id/secret together. Like it already happens for the rest of core sessions (see owncloud/core#28879)
Additionally, a way to provide more details about the OAuth sessions open would be quite helpful (we already have "most recent activity" both for sessions and application passwords, we could have an additional "IP address") - e.g. taken from Google Apps' recent activity:
A couple of ideas about on implementing this: either,
Give an optional name to a device once it gets authorized (e.g. "Office", "Laptop", ... )
Transmit the hostname & platform the client is running on in first connection (via additional parameters in the access token request) - Dropbox security tab can be seen as example:
SamuAlfageme
changed the title
[Feature Request] Display one entry per session/device additionally of per-client in Settings > Personal > Security
[Feature Request] Display one entry per session/device additionally to clients in Settings > Personal > Security
Oct 24, 2017
While testing how OAuth sessions are reflected in the Personal > Security settings section after owncloud/core#28879, and given the nature of how the same clients will be used across multiple devices to connect to an account via OAuth, I was wondering if a more fine-grained device/session control could be implemented.
Per application
What is implemented already: to revoke whole apps from further accessing an account - e.g. twitter or from StackExchange settings:
Per device/session
It'd also be interesting from an user point of view to be able to revoke access to individual devices/sessions - e.g. in case of loss - rather than all the clients sharing id/secret together. Like it already happens for the rest of core sessions (see owncloud/core#28879)
Additionally, a way to provide more details about the OAuth sessions open would be quite helpful (we already have "most recent activity" both for sessions and application passwords, we could have an additional "IP address") - e.g. taken from Google Apps' recent activity:
A couple of ideas about on implementing this: either,
cc/ @pmaier1 @michaelstingl
The text was updated successfully, but these errors were encountered: