authentication_session table - SuperOffice

authentication_session Table (553)

One row per authenticated user session; owner, random session id, last activity, the encrypted OIDC tokens received during login, and the expiry of the time-bound NetServer secret (login.ns_secret). Rows are touched at most every five minutes and removed when older than one hour

Fields

Name	Description	Type	Nullable
authentication_session_id	Primary key	PK	No
associate_id	The associate (user) this authentication session belongs to	FK associate	No
session_id	Cryptographically random 20 character string identifying this session	String(20)	No
last_seen	When this session was last seen (UTC). Updated at most every five minutes; sessions not seen for one hour are removed	UtcDateTime	No
id_token	Encrypted OIDC id_token received in the authorization code flow. Encrypted by NetServer before it is written; never stored in plaintext	Clob	Yes
access_token	Encrypted OAuth 2.0 access token received in the authorization code flow. Encrypted by NetServer before it is written; never stored in plaintext	Clob	Yes
refresh_token	Encrypted OAuth 2.0 refresh token received in the authorization code flow. Encrypted by NetServer before it is written; never stored in plaintext	Clob	Yes
login_ns_secret_expiry	When the time-bound NetServer secret in login.ns_secret expires (UTC). Kept here rather than on login for database performance	UtcDateTime	Yes
registered	Registered when	UtcDateTime	No
registered_associate_id	Registered by whom	FK associate	No
updated	Last updated when	UtcDateTime	No
updated_associate_id	Last updated by whom	FK associate	No
updatedCount	Number of updates made to this record	UShort	No

authentication_session table relationship diagram

Indexes

Fields	Types	Description
associate_id	FK	Index
session_id	String(20)	Unique
last_seen	UtcDateTime	Index

Relationships

Table	Description
associate	Employees, resources and other users - except for External persons
login	This table contains entries for the user sessions.

Replication Flags

None

Security Flags

No access control via user’s Role.