strapi-plugin-magic-sessionmanager 4.3.4 → 4.4.1

package/dist/server/index.js

@@ -329,21 +329,37 @@ var lastSeen = ({ strapi: strapi2, sessionService }) => {
             limit: 1
           });
           if (!activeSessions || activeSessions.length === 0) {
-            const allSessions = await strapi2.documents(SESSION_UID$4).findMany({
-              filters: { user: { documentId: userDocId2 } },
-              limit: 1,
-              fields: ["isActive"]
+            const inactiveSessions = await strapi2.documents(SESSION_UID$4).findMany({
+              filters: {
+                user: { documentId: userDocId2 },
+                isActive: false
+              },
+              limit: 5,
+              fields: ["documentId", "terminatedManually", "lastActive"],
+              sort: [{ lastActive: "desc" }]
             });
-            const hasInactiveSessions = allSessions?.some((s3) => s3.isActive === false);
-            if (hasInactiveSessions) {
-              strapi2.log.info(`[magic-sessionmanager] [BLOCKED] Session terminated (user: ${userDocId2.substring(0, 8)}...)`);
-              return ctx.unauthorized("Session has been terminated. Please login again.");
-            }
-            if (strictMode) {
-              strapi2.log.info(`[magic-sessionmanager] [BLOCKED] No session exists (user: ${userDocId2.substring(0, 8)}..., strictMode)`);
-              return ctx.unauthorized("No valid session. Please login again.");
+            if (inactiveSessions && inactiveSessions.length > 0) {
+              const manuallyTerminated = inactiveSessions.find((s3) => s3.terminatedManually === true);
+              if (manuallyTerminated) {
+                strapi2.log.info(`[magic-sessionmanager] [BLOCKED] User ${userDocId2.substring(0, 8)}... was manually logged out`);
+                return ctx.unauthorized("Session has been terminated. Please login again.");
+              }
+              const sessionToReactivate = inactiveSessions[0];
+              await strapi2.documents(SESSION_UID$4).update({
+                documentId: sessionToReactivate.documentId,
+                data: {
+                  isActive: true,
+                  lastActive: /* @__PURE__ */ new Date()
+                }
+              });
+              strapi2.log.info(`[magic-sessionmanager] [REACTIVATED] Session reactivated for user ${userDocId2.substring(0, 8)}...`);
+            } else {
+              if (strictMode) {
+                strapi2.log.info(`[magic-sessionmanager] [BLOCKED] No session exists (user: ${userDocId2.substring(0, 8)}..., strictMode)`);
+                return ctx.unauthorized("No valid session. Please login again.");
+              }
+              strapi2.log.warn(`[magic-sessionmanager] [WARN] No session for user ${userDocId2.substring(0, 8)}... (allowing)`);
             }
-            strapi2.log.warn(`[magic-sessionmanager] [WARN] No session for user ${userDocId2.substring(0, 8)}... (allowing)`);
           }
           ctx.state.userDocumentId = userDocId2;
         }
@@ -793,6 +809,7 @@ async function registerSessionAwareAuthStrategy(strapi2, log) {
       const config2 = strapi2.config.get("plugin::magic-sessionmanager") || {};
       const strictMode = config2.strictSessionEnforcement === true;
       try {
+        const tokenHashValue = hashToken$2(token);
         let userDocId = null;
         const user = await strapi2.entityService.findOne(
           "plugin::users-permissions.user",
@@ -804,43 +821,69 @@ async function registerSessionAwareAuthStrategy(strapi2, log) {
           strapi2.log.debug("[magic-sessionmanager] [JWT] No documentId found, allowing through");
           return decoded;
         }
-        const activeSessions = await strapi2.documents(SESSION_UID$3).findMany({
+        const thisSession = await strapi2.documents(SESSION_UID$3).findFirst({
+          filters: {
+            user: { documentId: userDocId },
+            tokenHash: tokenHashValue
+          },
+          fields: ["documentId", "isActive", "terminatedManually", "lastActive"]
+        });
+        if (thisSession) {
+          if (thisSession.terminatedManually === true) {
+            strapi2.log.info(
+              `[magic-sessionmanager] [JWT-BLOCKED] Session was manually terminated (user: ${userDocId.substring(0, 8)}...)`
+            );
+            return null;
+          }
+          if (thisSession.isActive) {
+            return decoded;
+          }
+          await strapi2.documents(SESSION_UID$3).update({
+            documentId: thisSession.documentId,
+            data: {
+              isActive: true,
+              lastActive: /* @__PURE__ */ new Date()
+            }
+          });
+          strapi2.log.info(
+            `[magic-sessionmanager] [JWT-REACTIVATED] Session reactivated for user ${userDocId.substring(0, 8)}...`
+          );
+          return decoded;
+        }
+        const anyActiveSessions = await strapi2.documents(SESSION_UID$3).findMany({
           filters: {
             user: { documentId: userDocId },
             isActive: true
           },
           limit: 1
         });
-        if (activeSessions && activeSessions.length > 0) {
+        if (anyActiveSessions && anyActiveSessions.length > 0) {
+          strapi2.log.debug(
+            `[magic-sessionmanager] [JWT] No session for token but user has other active sessions (allowing)`
+          );
           return decoded;
         }
-        const allSessions = await strapi2.documents(SESSION_UID$3).findMany({
-          filters: { user: { documentId: userDocId } },
-          limit: 5,
-          fields: ["isActive", "lastActive"]
+        const terminatedSessions = await strapi2.documents(SESSION_UID$3).findMany({
+          filters: {
+            user: { documentId: userDocId },
+            terminatedManually: true
+          },
+          limit: 1
         });
-        const totalSessions = allSessions?.length || 0;
-        const hasInactiveSessions = allSessions?.some((s3) => s3.isActive === false);
-        if (hasInactiveSessions) {
+        if (terminatedSessions && terminatedSessions.length > 0) {
           strapi2.log.info(
-            `[magic-sessionmanager] [JWT-BLOCKED] User ${userDocId.substring(0, 8)}... was logged out (${totalSessions} inactive sessions)`
+            `[magic-sessionmanager] [JWT-BLOCKED] User ${userDocId.substring(0, 8)}... has terminated sessions`
           );
           return null;
         }
-        if (totalSessions === 0) {
-          if (strictMode) {
-            strapi2.log.info(
-              `[magic-sessionmanager] [JWT-BLOCKED] No sessions exist for user ${userDocId.substring(0, 8)}... (strictMode enabled)`
-            );
-            return null;
-          }
-          strapi2.log.warn(
-            `[magic-sessionmanager] [JWT-WARN] No session found for user ${userDocId.substring(0, 8)}... (allowing - session may not have been created)`
+        if (strictMode) {
+          strapi2.log.info(
+            `[magic-sessionmanager] [JWT-BLOCKED] No sessions exist for user ${userDocId.substring(0, 8)}... (strictMode)`
           );
-          return decoded;
+          return null;
         }
         strapi2.log.warn(
-          `[magic-sessionmanager] [JWT-ALLOW] Unexpected session state for user ${userDocId.substring(0, 8)}... (allowing)`
+          `[magic-sessionmanager] [JWT-WARN] No session for user ${userDocId.substring(0, 8)}... (allowing)`
         );
         return decoded;
       } catch (err) {
@@ -960,6 +1003,11 @@ const attributes = {
     "default": true,
     required: true
   },
+  terminatedManually: {
+    type: "boolean",
+    "default": false,
+    required: false
+  },
   geoLocation: {
     type: "json"
   },
@@ -1099,6 +1147,15 @@ var admin$1 = {
         description: "Terminate a specific session (admin)"
       }
     },
+    {
+      method: "POST",
+      path: "/sessions/:sessionId/simulate-timeout",
+      handler: "session.simulateTimeout",
+      config: {
+        policies: ["admin::isAuthenticatedAdmin"],
+        description: "Simulate session timeout for testing (sets isActive: false, terminatedManually: false)"
+      }
+    },
     {
       method: "DELETE",
       path: "/sessions/:sessionId",
@@ -1680,6 +1737,40 @@ var session$3 = {
       ctx.throw(500, "Error terminating session");
     }
   },
+  /**
+   * Simulate session timeout for testing (Admin action)
+   * POST /magic-sessionmanager/sessions/:sessionId/simulate-timeout
+   * Sets isActive: false, terminatedManually: false (as if cleanup job ran)
+   * This allows testing session reactivation behavior
+   */
+  async simulateTimeout(ctx) {
+    try {
+      const { sessionId } = ctx.params;
+      const session2 = await strapi.documents(SESSION_UID$2).findOne({
+        documentId: sessionId
+      });
+      if (!session2) {
+        return ctx.notFound("Session not found");
+      }
+      await strapi.documents(SESSION_UID$2).update({
+        documentId: sessionId,
+        data: {
+          isActive: false,
+          terminatedManually: false
+          // This allows reactivation!
+        }
+      });
+      strapi.log.info(`[magic-sessionmanager] [TEST] Session ${sessionId} simulated timeout (terminatedManually: false)`);
+      ctx.body = {
+        message: `Session ${sessionId} marked as timed out (reactivatable)`,
+        success: true,
+        terminatedManually: false
+      };
+    } catch (err) {
+      strapi.log.error("[magic-sessionmanager] Error simulating timeout:", err);
+      ctx.throw(500, "Error simulating session timeout");
+    }
+  },
   /**
    * Terminate a single session (Admin action)
    * POST /magic-sessionmanager/sessions/:sessionId/terminate
@@ -2221,10 +2312,11 @@ var session$1 = ({ strapi: strapi2 }) => {
             documentId: sessionId,
             data: {
               isActive: false,
+              terminatedManually: true,
               logoutTime: now
             }
           });
-          log.info(`Session ${sessionId} terminated`);
+          log.info(`Session ${sessionId} terminated (manual)`);
         } else if (userId) {
           let userDocumentId = userId;
           if (!isNaN(userId)) {
@@ -2245,11 +2337,12 @@ var session$1 = ({ strapi: strapi2 }) => {
               documentId: session2.documentId,
               data: {
                 isActive: false,
+                terminatedManually: true,
                 logoutTime: now
               }
             });
           }
-          log.info(`All sessions terminated for user ${userDocumentId}`);
+          log.info(`All sessions terminated (manual) for user ${userDocumentId}`);
         }
       } catch (err) {
         log.error("Error terminating session:", err);
@@ -2590,7 +2683,11 @@ var session$1 = ({ strapi: strapi2 }) => {
           if (lastActiveTime < cutoffTime) {
             await strapi2.documents(SESSION_UID$1).update({
               documentId: session2.documentId,
-              data: { isActive: false }
+              data: {
+                isActive: false,
+                terminatedManually: false
+                // Timeout, not manual - can be reactivated
+              }
             });
             deactivatedCount++;
           }
@@ -2643,7 +2740,7 @@ var session$1 = ({ strapi: strapi2 }) => {
     }
   };
 };
-const version$1 = "4.3.3";
+const version$1 = "4.4.0";
 const require$$2 = {
   version: version$1
 };
@@ -38979,17 +39076,35 @@ var sessionRequired$1 = async (policyContext, config2, { strapi: strapi2 }) => {
     if (activeSessions && activeSessions.length > 0) {
       return true;
     }
-    const allSessions = await strapi2.documents(SESSION_UID).findMany({
-      filters: { user: { documentId: userDocId } },
-      limit: 1,
-      fields: ["isActive"]
+    const inactiveSessions = await strapi2.documents(SESSION_UID).findMany({
+      filters: {
+        user: { documentId: userDocId },
+        isActive: false
+      },
+      limit: 5,
+      fields: ["documentId", "terminatedManually", "lastActive"],
+      sort: [{ lastActive: "desc" }]
     });
-    const hasInactiveSessions = allSessions?.some((s3) => s3.isActive === false);
-    if (hasInactiveSessions) {
+    if (inactiveSessions && inactiveSessions.length > 0) {
+      const manuallyTerminated = inactiveSessions.find((s3) => s3.terminatedManually === true);
+      if (manuallyTerminated) {
+        strapi2.log.info(
+          `[magic-sessionmanager] [POLICY-BLOCKED] User ${userDocId.substring(0, 8)}... was manually logged out`
+        );
+        throw new errors.UnauthorizedError("Session terminated. Please login again.");
+      }
+      const sessionToReactivate = inactiveSessions[0];
+      await strapi2.documents(SESSION_UID).update({
+        documentId: sessionToReactivate.documentId,
+        data: {
+          isActive: true,
+          lastActive: /* @__PURE__ */ new Date()
+        }
+      });
       strapi2.log.info(
-        `[magic-sessionmanager] [POLICY-BLOCKED] Session terminated (user: ${userDocId.substring(0, 8)}...)`
+        `[magic-sessionmanager] [POLICY-REACTIVATED] Session reactivated for user ${userDocId.substring(0, 8)}...`
       );
-      throw new errors.UnauthorizedError("Session terminated. Please login again.");
+      return true;
     }
     if (strictMode) {
       strapi2.log.info(

package/dist/server/index.mjs

@@ -316,21 +316,37 @@ var lastSeen = ({ strapi: strapi2, sessionService }) => {
             limit: 1
           });
           if (!activeSessions || activeSessions.length === 0) {
-            const allSessions = await strapi2.documents(SESSION_UID$4).findMany({
-              filters: { user: { documentId: userDocId2 } },
-              limit: 1,
-              fields: ["isActive"]
+            const inactiveSessions = await strapi2.documents(SESSION_UID$4).findMany({
+              filters: {
+                user: { documentId: userDocId2 },
+                isActive: false
+              },
+              limit: 5,
+              fields: ["documentId", "terminatedManually", "lastActive"],
+              sort: [{ lastActive: "desc" }]
             });
-            const hasInactiveSessions = allSessions?.some((s3) => s3.isActive === false);
-            if (hasInactiveSessions) {
-              strapi2.log.info(`[magic-sessionmanager] [BLOCKED] Session terminated (user: ${userDocId2.substring(0, 8)}...)`);
-              return ctx.unauthorized("Session has been terminated. Please login again.");
-            }
-            if (strictMode) {
-              strapi2.log.info(`[magic-sessionmanager] [BLOCKED] No session exists (user: ${userDocId2.substring(0, 8)}..., strictMode)`);
-              return ctx.unauthorized("No valid session. Please login again.");
+            if (inactiveSessions && inactiveSessions.length > 0) {
+              const manuallyTerminated = inactiveSessions.find((s3) => s3.terminatedManually === true);
+              if (manuallyTerminated) {
+                strapi2.log.info(`[magic-sessionmanager] [BLOCKED] User ${userDocId2.substring(0, 8)}... was manually logged out`);
+                return ctx.unauthorized("Session has been terminated. Please login again.");
+              }
+              const sessionToReactivate = inactiveSessions[0];
+              await strapi2.documents(SESSION_UID$4).update({
+                documentId: sessionToReactivate.documentId,
+                data: {
+                  isActive: true,
+                  lastActive: /* @__PURE__ */ new Date()
+                }
+              });
+              strapi2.log.info(`[magic-sessionmanager] [REACTIVATED] Session reactivated for user ${userDocId2.substring(0, 8)}...`);
+            } else {
+              if (strictMode) {
+                strapi2.log.info(`[magic-sessionmanager] [BLOCKED] No session exists (user: ${userDocId2.substring(0, 8)}..., strictMode)`);
+                return ctx.unauthorized("No valid session. Please login again.");
+              }
+              strapi2.log.warn(`[magic-sessionmanager] [WARN] No session for user ${userDocId2.substring(0, 8)}... (allowing)`);
             }
-            strapi2.log.warn(`[magic-sessionmanager] [WARN] No session for user ${userDocId2.substring(0, 8)}... (allowing)`);
           }
           ctx.state.userDocumentId = userDocId2;
         }
@@ -780,6 +796,7 @@ async function registerSessionAwareAuthStrategy(strapi2, log) {
       const config2 = strapi2.config.get("plugin::magic-sessionmanager") || {};
       const strictMode = config2.strictSessionEnforcement === true;
       try {
+        const tokenHashValue = hashToken$2(token);
         let userDocId = null;
         const user = await strapi2.entityService.findOne(
           "plugin::users-permissions.user",
@@ -791,43 +808,69 @@ async function registerSessionAwareAuthStrategy(strapi2, log) {
           strapi2.log.debug("[magic-sessionmanager] [JWT] No documentId found, allowing through");
           return decoded;
         }
-        const activeSessions = await strapi2.documents(SESSION_UID$3).findMany({
+        const thisSession = await strapi2.documents(SESSION_UID$3).findFirst({
+          filters: {
+            user: { documentId: userDocId },
+            tokenHash: tokenHashValue
+          },
+          fields: ["documentId", "isActive", "terminatedManually", "lastActive"]
+        });
+        if (thisSession) {
+          if (thisSession.terminatedManually === true) {
+            strapi2.log.info(
+              `[magic-sessionmanager] [JWT-BLOCKED] Session was manually terminated (user: ${userDocId.substring(0, 8)}...)`
+            );
+            return null;
+          }
+          if (thisSession.isActive) {
+            return decoded;
+          }
+          await strapi2.documents(SESSION_UID$3).update({
+            documentId: thisSession.documentId,
+            data: {
+              isActive: true,
+              lastActive: /* @__PURE__ */ new Date()
+            }
+          });
+          strapi2.log.info(
+            `[magic-sessionmanager] [JWT-REACTIVATED] Session reactivated for user ${userDocId.substring(0, 8)}...`
+          );
+          return decoded;
+        }
+        const anyActiveSessions = await strapi2.documents(SESSION_UID$3).findMany({
           filters: {
             user: { documentId: userDocId },
             isActive: true
           },
           limit: 1
         });
-        if (activeSessions && activeSessions.length > 0) {
+        if (anyActiveSessions && anyActiveSessions.length > 0) {
+          strapi2.log.debug(
+            `[magic-sessionmanager] [JWT] No session for token but user has other active sessions (allowing)`
+          );
           return decoded;
         }
-        const allSessions = await strapi2.documents(SESSION_UID$3).findMany({
-          filters: { user: { documentId: userDocId } },
-          limit: 5,
-          fields: ["isActive", "lastActive"]
+        const terminatedSessions = await strapi2.documents(SESSION_UID$3).findMany({
+          filters: {
+            user: { documentId: userDocId },
+            terminatedManually: true
+          },
+          limit: 1
         });
-        const totalSessions = allSessions?.length || 0;
-        const hasInactiveSessions = allSessions?.some((s3) => s3.isActive === false);
-        if (hasInactiveSessions) {
+        if (terminatedSessions && terminatedSessions.length > 0) {
           strapi2.log.info(
-            `[magic-sessionmanager] [JWT-BLOCKED] User ${userDocId.substring(0, 8)}... was logged out (${totalSessions} inactive sessions)`
+            `[magic-sessionmanager] [JWT-BLOCKED] User ${userDocId.substring(0, 8)}... has terminated sessions`
           );
           return null;
         }
-        if (totalSessions === 0) {
-          if (strictMode) {
-            strapi2.log.info(
-              `[magic-sessionmanager] [JWT-BLOCKED] No sessions exist for user ${userDocId.substring(0, 8)}... (strictMode enabled)`
-            );
-            return null;
-          }
-          strapi2.log.warn(
-            `[magic-sessionmanager] [JWT-WARN] No session found for user ${userDocId.substring(0, 8)}... (allowing - session may not have been created)`
+        if (strictMode) {
+          strapi2.log.info(
+            `[magic-sessionmanager] [JWT-BLOCKED] No sessions exist for user ${userDocId.substring(0, 8)}... (strictMode)`
           );
-          return decoded;
+          return null;
         }
         strapi2.log.warn(
-          `[magic-sessionmanager] [JWT-ALLOW] Unexpected session state for user ${userDocId.substring(0, 8)}... (allowing)`
+          `[magic-sessionmanager] [JWT-WARN] No session for user ${userDocId.substring(0, 8)}... (allowing)`
         );
         return decoded;
       } catch (err) {
@@ -947,6 +990,11 @@ const attributes = {
     "default": true,
     required: true
   },
+  terminatedManually: {
+    type: "boolean",
+    "default": false,
+    required: false
+  },
   geoLocation: {
     type: "json"
   },
@@ -1086,6 +1134,15 @@ var admin$1 = {
         description: "Terminate a specific session (admin)"
       }
     },
+    {
+      method: "POST",
+      path: "/sessions/:sessionId/simulate-timeout",
+      handler: "session.simulateTimeout",
+      config: {
+        policies: ["admin::isAuthenticatedAdmin"],
+        description: "Simulate session timeout for testing (sets isActive: false, terminatedManually: false)"
+      }
+    },
     {
       method: "DELETE",
       path: "/sessions/:sessionId",
@@ -1667,6 +1724,40 @@ var session$3 = {
       ctx.throw(500, "Error terminating session");
     }
   },
+  /**
+   * Simulate session timeout for testing (Admin action)
+   * POST /magic-sessionmanager/sessions/:sessionId/simulate-timeout
+   * Sets isActive: false, terminatedManually: false (as if cleanup job ran)
+   * This allows testing session reactivation behavior
+   */
+  async simulateTimeout(ctx) {
+    try {
+      const { sessionId } = ctx.params;
+      const session2 = await strapi.documents(SESSION_UID$2).findOne({
+        documentId: sessionId
+      });
+      if (!session2) {
+        return ctx.notFound("Session not found");
+      }
+      await strapi.documents(SESSION_UID$2).update({
+        documentId: sessionId,
+        data: {
+          isActive: false,
+          terminatedManually: false
+          // This allows reactivation!
+        }
+      });
+      strapi.log.info(`[magic-sessionmanager] [TEST] Session ${sessionId} simulated timeout (terminatedManually: false)`);
+      ctx.body = {
+        message: `Session ${sessionId} marked as timed out (reactivatable)`,
+        success: true,
+        terminatedManually: false
+      };
+    } catch (err) {
+      strapi.log.error("[magic-sessionmanager] Error simulating timeout:", err);
+      ctx.throw(500, "Error simulating session timeout");
+    }
+  },
   /**
    * Terminate a single session (Admin action)
    * POST /magic-sessionmanager/sessions/:sessionId/terminate
@@ -2208,10 +2299,11 @@ var session$1 = ({ strapi: strapi2 }) => {
             documentId: sessionId,
             data: {
               isActive: false,
+              terminatedManually: true,
               logoutTime: now
             }
           });
-          log.info(`Session ${sessionId} terminated`);
+          log.info(`Session ${sessionId} terminated (manual)`);
         } else if (userId) {
           let userDocumentId = userId;
           if (!isNaN(userId)) {
@@ -2232,11 +2324,12 @@ var session$1 = ({ strapi: strapi2 }) => {
               documentId: session2.documentId,
               data: {
                 isActive: false,
+                terminatedManually: true,
                 logoutTime: now
               }
             });
           }
-          log.info(`All sessions terminated for user ${userDocumentId}`);
+          log.info(`All sessions terminated (manual) for user ${userDocumentId}`);
         }
       } catch (err) {
         log.error("Error terminating session:", err);
@@ -2577,7 +2670,11 @@ var session$1 = ({ strapi: strapi2 }) => {
           if (lastActiveTime < cutoffTime) {
             await strapi2.documents(SESSION_UID$1).update({
               documentId: session2.documentId,
-              data: { isActive: false }
+              data: {
+                isActive: false,
+                terminatedManually: false
+                // Timeout, not manual - can be reactivated
+              }
             });
             deactivatedCount++;
           }
@@ -2630,7 +2727,7 @@ var session$1 = ({ strapi: strapi2 }) => {
     }
   };
 };
-const version$1 = "4.3.3";
+const version$1 = "4.4.0";
 const require$$2 = {
   version: version$1
 };
@@ -38966,17 +39063,35 @@ var sessionRequired$1 = async (policyContext, config2, { strapi: strapi2 }) => {
     if (activeSessions && activeSessions.length > 0) {
       return true;
     }
-    const allSessions = await strapi2.documents(SESSION_UID).findMany({
-      filters: { user: { documentId: userDocId } },
-      limit: 1,
-      fields: ["isActive"]
+    const inactiveSessions = await strapi2.documents(SESSION_UID).findMany({
+      filters: {
+        user: { documentId: userDocId },
+        isActive: false
+      },
+      limit: 5,
+      fields: ["documentId", "terminatedManually", "lastActive"],
+      sort: [{ lastActive: "desc" }]
     });
-    const hasInactiveSessions = allSessions?.some((s3) => s3.isActive === false);
-    if (hasInactiveSessions) {
+    if (inactiveSessions && inactiveSessions.length > 0) {
+      const manuallyTerminated = inactiveSessions.find((s3) => s3.terminatedManually === true);
+      if (manuallyTerminated) {
+        strapi2.log.info(
+          `[magic-sessionmanager] [POLICY-BLOCKED] User ${userDocId.substring(0, 8)}... was manually logged out`
+        );
+        throw new errors.UnauthorizedError("Session terminated. Please login again.");
+      }
+      const sessionToReactivate = inactiveSessions[0];
+      await strapi2.documents(SESSION_UID).update({
+        documentId: sessionToReactivate.documentId,
+        data: {
+          isActive: true,
+          lastActive: /* @__PURE__ */ new Date()
+        }
+      });
       strapi2.log.info(
-        `[magic-sessionmanager] [POLICY-BLOCKED] Session terminated (user: ${userDocId.substring(0, 8)}...)`
+        `[magic-sessionmanager] [POLICY-REACTIVATED] Session reactivated for user ${userDocId.substring(0, 8)}...`
       );
-      throw new errors.UnauthorizedError("Session terminated. Please login again.");
+      return true;
     }
     if (strictMode) {
       strapi2.log.info(

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.3.4",
+  "version": "4.4.1",
   "keywords": [
     "strapi",
     "strapi-plugin",