Trying to avoid Duplicate User's Session Records in Session Table: Laravel

Question

Sample data in this table looks like below:

There are multiple duplicate User's Session records present in the table.

vendor\laravel\framework\src\Illuminate\Session\DatabaseSessionHandler.php

In the above file path, we have below method

public function write($sessionId, $data)
{
    $payload = $this->getDefaultPayload($data);

    if (! $this->exists) {
        $this->read($sessionId);
    }
    if ($this->exists) {
        $this->getQuery()->where('id', $sessionId)->update($payload);
    } else {
        $payload['id'] = $sessionId;

        $this->getQuery()->insert($payload);
    }

    $this->exists = true;
}

It checks for Session ID.

Question

Can I avoid creation of duplicate User Session Records in Session Table? Is there any flag that do so in Session Config file?

This allows a user to log from many different devices and/or browsers, so he can access the app from phone and computer for example. You want to log out the user from all other instances when he logs in? — Pawel Bieszczad
– Pawel Bieszczad, Commented Aug 18, 2016 at 18:46
btw would this be helpful? stackoverflow.com/questions/33311771/… — Maytham Fahmi
– Maytham Fahmi, Commented Aug 18, 2016 at 18:49
@Helper Are you use build-in auth (artisan make:auth)? Can i edit \App\Http\Auth\AuthController for this purpose? — KmasterYC
– KmasterYC, Commented Aug 21, 2016 at 16:23

Thibault Dumas · Accepted Answer · 2016-08-23 13:28:58Z

1

It seems to be an error in your traitement, must be like this no ? :

 if (! $this->exists) {
    $this->read($sessionId);
}else{

   if ($this->exists) {
       $this->getQuery()->where('id', $sessionId)->update($payload);
   } else {
       $payload['id'] = $sessionId;
       $this->getQuery()->insert($payload);
   }
}

answered Aug 23, 2016 at 13:28

Thibault Dumas

1,0802 gold badges11 silver badges24 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Pankaj Over a year ago

I am sorry to say, I think this code is the same which is present already in my question?

Raymond Cheng · Accepted Answer · 2016-08-25 16:30:05Z

From your question, you want only leave one user session in database, which means one user can only login from one device, example if you already logined from chrome , then if you login from firefox, your chrome login status will be removed.

To acheive this you can write a function in App\Http\Controllers\Auth\AuthController:

public function authenticated(Request $request,User $user){
    $previous_session = $user->session_id;

    if ($previous_session) {
    \Session::getHandler()->destroy($previous_session);
    }

    Auth::user()->session_id = \Session::getId();
    Auth::user()->save();
    return redirect()->intended($this->redirectPath());
}

this function will destory prvious session from database before login. for more info you should check Trait :Illuminate\Foundation\Auth\AuthenticatesUsers

Collectives™ on Stack Overflow

Trying to avoid Duplicate User's Session Records in Session Table: Laravel

2 Answers 2

1 Comment

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related