I created a new WIki page https://openwrt.org/doc/ubus/session
ATM the session management is described only here https://openwrt.org/docs/techref/ubus#session_management
But there is a lot of other methods that aren't documented anywhere:
ubus -v list session
'session' @4df86fe9
"create":{"timeout":"Integer"}
"list":{"ubus_rpc_session":"String"}
"grant":{"ubus_rpc_session":"String","scope":"String","objects":"Array"}
"revoke":{"ubus_rpc_session":"String","scope":"String","objects":"Array"}
"access":{"ubus_rpc_session":"String","scope":"String","object":"String","function":"String"}
"set":{"ubus_rpc_session":"String","values":"Table"}
"get":{"ubus_rpc_session":"String","keys":"Array"}
"unset":{"ubus_rpc_session":"String","keys":"Array"}
"destroy":{"ubus_rpc_session":"String"}
"login":{"username":"String","password":"String","timeout":"Integer"}
if anyone can put some small description of the methods that will be great. Especially interesting is the access
method which is allowed for unauthenticated
user.
This is very important topic because any issues with the session management can make the system vulnerable