app/stories/end-user/EU-003-device-management.md

View and Manage Logged-in Devices

ID: EU-003 Priority: Medium Status: Planned

User Story

As an end user, I want to view all devices where I'm logged in and remotely log out of specific devices so that I can maintain control over my account security.

Acceptance Criteria

• User can view a list of all active sessions/devices
• Each device entry shows: device type, browser, location (approximate), last activity
• User can name/label devices for easy identification
• User can log out of any individual device remotely
• User can log out of all devices except the current one
• User receives notification when a new device logs in

Technical Notes

• Device ID tracking infrastructure exists but is blocked by JWT handling issues
• Need to complete attachDeviceId handler (currently returns ok: false)
• Store device fingerprint, user agent, IP-based geolocation
• Integrate with multi-refresh-token system (EU-001)

Related TODOs

• ts/reception/classes.loginsessionmanager.ts:256 - // TODO: Blocked by proper JWT handling