Data Center 10.0
バージョン

Invalidating active user sessions

Managing users

このページの内容

関連コンテンツ

  • 関連コンテンツがありません

お困りですか?

アトラシアン コミュニティをご利用ください。

コミュニティに質問

Unless a user has selected the Remember my login on this computer checkbox when logging into Bamboo, by default, their session will expire after 30 minutes of inactivity. If you need to force the invalidation of all active user sessions for a particular user, you can do that from the Bamboo web interface or through the REST API.

When a user changes their password, all their sessions except the one they used to request the password change will be automatically invalidated, and their rememberme token will be deleted from the database.

On this page:

Invalidating user sessions through the Bamboo web interface

To invalidate a user's all active sessions through the Bamboo web interface:

  1. From the top navigation bar, select
    Administration bamboo administration icon
    > User management.
  2. From the list on the Users page, select the user whose sessions you'd like to invalidate.
  3. In the top-right corner of the User details page, select Invalidate sessions.
  4. In the confirmation dialog, select Confirm.

Invalidating user sessions through the Bamboo REST API

To invalidate a user's all active sessions through the Bamboo REST API, call the following endpoint as an Administrator:

DELETE /rest/admin/latest/session/{username}

Replace {username} with the username of the account whose sessions you want to invalidate.

Invalidating persistent sessions

If you've enabled session persistence across Bamboo server restarts, sessions started before a restart can't be invalidated using any of the methods described on this page. In case you need to invalidate persistent sessions (potentially for security reasons), you can do so by deleting the file that stores session data and manually removing the rememberme token from the database.

To invalidate persistent sessions:

  1. Bamboo をシャットダウンします。
  2. Check the following directories for the SESSIONS.ser file and delete it from there:
    • $CATALINA_BASE/work/<ENGINE_NAME>/<HOSTNAME>/<APP_NAME>
    • $CATALINA_BASE/work/Catalina/localhost/ROOT
  3. Filter the rememberme_token table in your database by the name of the user whose sessions you want to invalidate and delete all rememberme tokens associated with them.


最終更新日 2023 年 5 月 25 日

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する

関連コンテンツ

  • 関連コンテンツがありません
Powered by Confluence and Scroll Viewport.