All 7 Session Management with Redis questions
More in Session Management with Redis
Why is Redis a popular choice for storing web application session data? How do you extend a user's session expiration time each time they make a new request, keeping active users logged in? How would you store more complex session data, such as a user's cart contents alongside their basic login information, using Redis? How do you monitor the total number of active sessions currently stored in Redis, and why might this metric be useful? How would you design a session management system that supports both a sliding expiration for active users and an absolute maximum session lifetime regardless of activity? What security considerations are important when storing sensitive session data in Redis, such as authentication tokens?
Advertisement
Back to results for “Set”
Redis › Session Management with Redis

How do you implement a feature that forcibly logs out a specific user across all of their active sessions and devices?

Intermediate

Answer

You maintain a set that tracks all the active session identifiers associated with a specific user, and when you need to force a logout across all their devices, you retrieve that set and delete every individual session key it references, effectively invalidating all of that user's active sessions at once.
SADD user_sessions:42 'session:abc123' 'session:xyz789'
-- To force logout everywhere:
DEL session:abc123 session:xyz789
DEL user_sessions:42
Real-world example A security feature lets a user click a button to log out of all their devices at once, using a tracked set of their active session keys to efficiently invalidate every single one simultaneously.

Common follow-ups: How do you keep this tracking set properly updated as sessions naturally expire on their own?;What happens if a session key expires naturally but is still referenced in the tracking set?

Sets & Sorted Sets in Redis;Distributed Locks with Redis
All 7 Session Management with Redis questions