Check User Sessions Bugs

Describe the bug

Couldn’t get user sessions from GET _https://keycloakhost.com/auth/{MY_REALM}/users/{USER_ID}/sessions_

i also tried another URL like : GET _https://keycloakhost.com/auth/admin/{MY_REALM}/users/{USER_ID}/sessions_ (got 404) GET _https://keycloakhost.com/admin/{MY_REALM}/users/{USER_ID}/sessions_ (got 403) GET _https://keycloakhost.com/{MY_REALM}/users/{USER_ID}/sessions_ (got 404)

Version

17.0.0

Expected behavior

got user session

Actual behavior

response :```

{ “error”: "RESTEASY003210: Could not find resource for full path: https://keycloak… }

### How to Reproduce?

curl --location --request GET "https://KEYCLOAK_HOST/admin/realms/MY_REALM/users/MY_USERS/sessions" --header "Authorization: Bearer eyJhbGciOiJSUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICIxaGFqNlpkMmV2b28wMHIxUGNxcjZxOEljTjYxcUFwLS1ZS2xWYmFDcmJVIn0.eyJleHAiOjE2NDk2NTUyNzgsImlhdCI6MTY0OTY1NDk3OCwianRpIjoiMWEyMjdlNTMtNTQyZC00NDYxLTlkMDMtZjFmOTY2Y2JiZmQ4IiwiaXNzIjoiaHR0cHM6Ly9rZXljbG9hay1ub25wcm9kLmJmaS5jby5pZC9yZWFsbXMvSUFNX0JGSV9ERVYiLCJhdWQiOiJhY2NvdW50Iiwic3ViIjoiZGJmOTQ3NmQtNDM4Ny00NGViLTk0NDgtNGI0YjAwZDczMzMxIiwidHlwIjoiQmVhcmVyIiwiYXpwIjoibmV3LWluc3VyYW5jZSIsInNlc3Npb25fc3RhdGUiOiIxYTc0MTY5Ny1kZGMyLTRkNTEtOWIwYi1iZjQyZTcyZDdkMWIiLCJhY3IiOiIxIiwiYWxsb3dlZC1vc...."

KEYCLOAK_HOST, MY_REALM, MY_USERS, should be change with your own config


### Anything else?

_No response_

[mhajas]

I don’t think there is any REST endpoint for what you need. Users cannot remove their own sessions unless they have authorization for that.

Not sure what you mean by Client SDK, but if you mean client service account, it could work.

Also, for queries like this, it is better to ask on some community forum, in this case, User mailing list would be the best option. There is a wider audience and people have more experience with real-world use cases. You can describe your use case and I am sure someone will help you.

[pandu-malik]

no, not that kind of scenario. my scenario is when someone do login, it first check if the users already has some sessions somewhere else, if yes, then i need to kill previous sessions. i also tried using java Client SDK, and it’s work perfectly, but just wondering if there any rest API built in with this feature (session check).