Idea: surface stale/unverified sessions with a one-click "sign out stale sessions" — but done properly, which needs product decisions first.
### Questions for Jared (answer here, then a design pass follows)
1. **Where:** a banner (like unverified-device), a badge on Settings → Devices, or only inside the Devices page?
2. **What counts as stale:** last-seen > 30 / 60 / 90 days? Unverified regardless of age?
3. **Tone:** one-off nudge with "don't show again", or recurring (monthly)?
4. **Action:** bulk "sign out all stale" (needs re-auth/UIA — OIDC users get bounced to Authelia; acceptable?) vs. review one by one.
5. **Never touch:** the current session, sessions with an active call, sessions younger than N days — confirm.
6. **Privacy:** last-seen IP is shown by Synapse; show it, or just city-less "last active 40 days ago"?
7. Should a session being **unverified** also nudge "verify this device" (there is already a verification flow) or is that a separate banner?
### Existing surface
Settings → Devices (`features/settings/devices`) lists sessions with per-device verify; `useDeviceVerificationStatus`, `DeviceVerificationSetup.tsx`.
jared
added this to the Features 2026-Q4 milestone 2026-09-17 13:27:07 -04:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Idea: surface stale/unverified sessions with a one-click "sign out stale sessions" — but done properly, which needs product decisions first.
Questions for Jared (answer here, then a design pass follows)
Existing surface
Settings → Devices (
features/settings/devices) lists sessions with per-device verify;useDeviceVerificationStatus,DeviceVerificationSetup.tsx.