Download the PHP package stanleykinkelaar/laravel-browser-sessions-lite without Composer

🚀 Laravel Browser Sessions Lite

Ever wondered who's logged into your app right now? 🤔 This lightweight Laravel package lets users see all their active browser sessions and securely log out suspicious ones—all without the bloat of heavy device detection libraries.

Perfect for apps that need Jetstream-style session management but want to keep it simple and fast.

✨ Features

• 📱 No Device Detection Libraries - Lightweight regex-based detection without heavy dependencies
• 🔒 Secure by Default - Password-verified logout prevents accidental lockouts
• 🎨 Beautiful UI - Jetstream-inspired Blade view with Tailwind CSS
• 🌐 JSON API Ready - Full REST API support for SPAs and mobile apps
• 🔍 Smart Device Hints - Lightweight regex-based detection (iOS, Android, browsers, OS)
• ⚡ Modern Laravel - Works seamlessly with Laravel 10, 11 & 12
• 🧪 Battle-Tested - Comprehensive Pest test suite with 100% coverage
• 🎯 Spatie Standards - Built on spatie/laravel-package-tools

🎯 Use Cases

• Security-conscious apps - Let users monitor and manage their active sessions
• Multi-device workflows - Show users where they're logged in (phone, tablet, laptop)
• Account hijacking prevention - Users can quickly log out suspicious sessions
• Jetstream alternative - Get session management without Jetstream's full stack

📦 Requirements

🚀 Installation

Step 1: Install via Composer

Step 2: Configure Database Sessions

This package requires Laravel's database session driver. Update your .env:

Create the sessions table (if you haven't already):

Step 3: Publish Assets (Optional)

Publish config file to customize routes and middleware:

Publish views to customize the UI:

⚙️ Configuration

The config file (config/browser-sessions-lite.php) allows you to customize behavior:

Pro tip: Need admin-only access? Change middleware to ['web', 'auth', 'admin']

🎨 Usage

Web UI (Blade)

The package automatically registers these routes:

Simply visit /user/browser-sessions in your browser to see the beautiful UI!

🎉 That's it! The view looks like this:

• ✅ List of all active sessions with device hints
• ✅ Current device highlighted with a badge
• ✅ IP addresses and "last active" timestamps
• ✅ Password-protected "Log Out Other Sessions" button
• ✅ Success/error flash messages
• ✅ Fully responsive (mobile-friendly)

Programmatic Usage (PHP)

List Sessions for Current User

Logout Other Sessions (with password verification)

Force Logout (admin use - skips password check)

Check for Multiple Sessions

JSON API Usage (for SPAs & Mobile Apps)

All routes support JSON responses when using Accept: application/json header.

List Sessions (JSON)

Response:

Logout Other Sessions (JSON)

Success Response:

Error Response (422):

🔍 Device Detection

The package uses simple regex patterns for device hints (no external libraries, zero bloat):

Note: Detection order matters! Edge and Chrome are checked before Safari (since their UAs contain "Safari").

🎬 Example Integrations

Integration 1: Laravel Blade Layout

Integration 2: Vue/React SPA

Integration 3: Livewire Component

🤔 Why No Device Detection Libraries?

This package intentionally avoids external device detection libraries like jenssegers/agent or mobiledetect/mobiledetectlib because:

✅ Faster installation - No heavy dependencies to download ✅ Fewer conflicts - Less chance of version mismatch issues ✅ Smaller footprint - Keeps your vendor/ folder lean ✅ Easier maintenance - Simple regex patterns anyone can understand ✅ Focused purpose - Does one thing (session management) really well

Need advanced device detection? (browser versions, OS versions, device models, etc.) Consider using a dedicated package alongside this one. This package focuses on giving users just enough info to identify their devices—without the bloat.

🧪 Testing

This package includes a comprehensive Pest test suite covering:

• ✅ Repository layer (session queries, device detection)
• ✅ Service layer (password verification, logout logic)
• ✅ Controller layer (HTTP requests, JSON responses)
• ✅ Integration tests (full flow from request to database)

Run Tests

Example Test Output

🛠️ How to Test in Your Package

Since this is a Spatie-style Laravel package, testing is set up using:

1. Orchestra Testbench - Simulates a Laravel app environment
2. Pest PHP - Modern testing framework
3. In-memory SQLite - Fast test database

Running Tests During Development

Testing in a Real Laravel App

Want to test this package in your actual Laravel app before release?

Option 1: Composer Local Path

Add to your Laravel app's composer.json:

Then run:

Option 2: Testbench Workbench (Spatie Style)

Use Orchestra Testbench's workbench feature:

Visit http://localhost:8000/user/browser-sessions to test the UI!

📋 Architecture Overview

This package follows Spatie conventions and clean architecture:

Design principles:

• ✅ Repository pattern - Separates database logic from business logic
• ✅ Service layer - Handles password verification and authentication
• ✅ Single responsibility - Each class does one thing well
• ✅ Dependency injection - Fully testable and mockable
• ✅ Laravel conventions - Feels native to Laravel

🔐 Security Best Practices

This package is designed with security in mind:

✅ Password verification required - Users must enter their password to log out other sessions ✅ Laravel's current_password rule - Uses built-in validation ✅ Auth middleware by default - Routes protected out of the box ✅ CSRF protection - Form submissions are CSRF-protected ✅ Session rehashing - Uses Laravel's Auth::logoutOtherDevices()

Reporting Security Vulnerabilities

Please review our security policy on how to report security vulnerabilities.

🤝 Contributing

Contributions are welcome! Here's how you can help:

1. Fork the repository
2. Create a feature branch (git checkout -b feature/amazing-feature)
3. Write tests for your changes
4. Run the test suite (composer test)
5. Fix code style (composer format)
6. Commit your changes (git commit -m 'Add amazing feature')
7. Push to your branch (git push origin feature/amazing-feature)
8. Open a Pull Request

Please see CONTRIBUTING.md for detailed guidelines.

📝 Changelog

All notable changes are documented in CHANGELOG.md.

📜 License

The MIT License (MIT). See LICENSE.md for details.

🙏 Credits

• Stanley Kinkelaar - Creator & Maintainer
• Inspired by Laravel Jetstream's session management
• Built on Spatie's Laravel Package Tools
• All contributors listed in contributors

⭐ Show Your Support

If this package helped you, consider:

• ⭐ Starring the repo on GitHub
• 🐦 Sharing it on Twitter
• ☕ Buying me a coffee (coming soon!)

Made with ❤️ by Stanley Kinkelaar
Built for the Laravel community 🎉