From a93a178b57b8a41dee4c6c83acb2f613508b1bf1 Mon Sep 17 00:00:00 2001
From: iou1name <iou1name@national.shitposting.agency>
Date: Wed, 25 Sep 2019 15:00:29 -0400
Subject: [PATCH] add active sessions section

---
 buckler.py           |  4 ++++
 templates/index.html | 28 +++++++++++++++++++++++++---
 2 files changed, 29 insertions(+), 3 deletions(-)

diff --git a/buckler.py b/buckler.py
index 0988958..d3dfca0 100644
--- a/buckler.py
+++ b/buckler.py
@@ -44,6 +44,10 @@ async def index(request):
 		fido2_keys = await conn.fetch(
 			"SELECT * FROM user_credential WHERE user_id = $1",
 			request['session']['id'])
+		active_sessions = await conn.fetch(
+			"SELECT ip_address FROM user_session "
+			"WHERE user_id = $1",
+			request['session']['id'])
 
 	if request['session']['admin']:
 		apps = [app['name'] for app in apps]
diff --git a/templates/index.html b/templates/index.html
index cb8c878..54a5f06 100644
--- a/templates/index.html
+++ b/templates/index.html
@@ -29,7 +29,7 @@
 			{% if request['session']['admin'] %}
 			<section>
 				<h2>User Permissions</h2>
-				<article>
+				<article style="display: none;">
 					<hr>
 					<table id="users">
 						<thead>
@@ -58,7 +58,7 @@
 			{% endif %}
 			<section>
 				<h2>Change Password</h2>
-				<article>
+				<article style="display: none;">
 					<hr>
 					<form action="{{ request.app.router['change_password'].url_for() }}" method="post" enctype="application/x-www-form-urlencoded">
 						<label for="current_password">Current password</label>
@@ -73,7 +73,7 @@
 			</section>
 			<section>
 				<h2>Security Keys</h2>
-				<article>
+				<article style="display: none;">
 					<hr>
 					{% if fido2_keys %}
 					<table id="security_keys">
@@ -98,6 +98,28 @@
 					<br><a href="./add_key">Add key</a>
 				</article>
 			</section>
+			<section>
+				<h2>Active Sessions</h2>
+				<article style="display: none;">
+					<hr>
+					<table id="active_sessions">
+						<thead>
+							<tr>
+								<th>IP Address</th>
+								<th>Delete</th>
+							</tr>
+						</thead>
+						<tbody>
+							{% for session in active_sessions %}
+							<tr>
+								<td>{{ session['ip_address'] }}</td>
+								<td><input type="checkbox"></td>
+							</tr>
+							{% endfor %}
+						</tbody>
+					</table>
+				</article>
+			</section>
 		</main>
 	</body>
 </html>