44 lines
1.3 KiB
PHP
44 lines
1.3 KiB
PHP
<?php
|
|
|
|
namespace App\Models;
|
|
|
|
use App\Models\Concerns\HasUuid;
|
|
use Illuminate\Database\Eloquent\Model;
|
|
use Illuminate\Database\Eloquent\Relations\BelongsTo;
|
|
|
|
/**
|
|
* One signed-in browser session, as something a person can see and end.
|
|
*
|
|
* Keyed by its own uuid, which is kept inside the session payload rather than
|
|
* by the session id. Laravel rotates the session id on every sign-in and on
|
|
* every regenerate() — a row keyed by that id loses sight of the session it
|
|
* describes within a request or two, and the operator is then offered a list of
|
|
* sessions that no longer exist next to the one they are sitting in.
|
|
*
|
|
* `session_id` is still stored, because ending a session means deleting the
|
|
* framework's own row: the next request from that browser finds nothing and is
|
|
* signed out. It is refreshed from the uuid on every request instead of being
|
|
* trusted to stay put.
|
|
*/
|
|
class LoginSession extends Model
|
|
{
|
|
use HasUuid;
|
|
|
|
/** Where the uuid lives inside the session payload. */
|
|
public const KEY = 'login_session_uuid';
|
|
|
|
protected $fillable = [
|
|
'device_id', 'session_id', 'ip_address', 'last_seen_at',
|
|
];
|
|
|
|
protected function casts(): array
|
|
{
|
|
return ['last_seen_at' => 'datetime'];
|
|
}
|
|
|
|
public function device(): BelongsTo
|
|
{
|
|
return $this->belongsTo(UserDevice::class, 'device_id');
|
|
}
|
|
}
|