How to forcefully log out a user in Django?

Question

Django

Hello everyone,
the situation is - the user is logged in on three computers under one login. On one of them he changed his password. On the other two, he must be forcibly logged out (in other words, the next time he requests the site, he will see him as an anonymous user).
How to do it? Are there native ways in Django to do this?

Answer 1

It is done quite simply: the field to which the session should be sensitive is sewn into the hash. In your case the password. It turns out that when the user changes the password, then all the old sessions will become invalid automatically and nothing will have to be sorted out.

Answer 2

There seems to be no native methods.
You can do this in different ways: you can iterate over all sessions, but this is inefficient;
you can create the last_login_date and force_logout_date fields for the user and compare them

Answer 3

Google pointed me to the update_session_auth_hash() method - isn't that it, by any chance?

Answer 4

https://docs.djangoproject.com/en/1.7/topics/auth/...