Reputation: 443
I'm developing a reactjs based application. I want to limit the login from multiple devices at one time to an account. So I need to have an ID that is unique and fixed on device.
I also want the user to stay logged in on one device, so I can not use IP address.
Also, I've already limited access from several browsers.
Thanks a lot. Also, sorry for my English.
Upvotes: 3
Views: 9921
Reputation: 91
This check can't be implemented on client side of the application.
On the server end, you can get IP address from requested payload. You can store the IP address against the session in In-memory databases like redis or memcache. Now, create an intermediate check at login controller where you can block the user if he/she has logged in more than certain number of IP addresses.
Upvotes: 2