Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Is there any way to get a callback of some sort (rest or otherwise) when a session is created, or, ideally, also when an existing session is modified (a new device appears or the session is extended).
I would like like this info so I can show the active session list on an administrative UI page (redacting the actual session ID of course).

To answer myself, The Origin url is not reliable in the flow info, the best I could do was to look for a session created by the same user and the AuthenticatedAt timestamp on the session is within a second of the updatedAt timestamp on the flow.

It would be great to be able to extract the sessionID (or some hashed version of it if that is a security risk) in the login hook in kratos.