Question

Is there an easy way in Authlogic (haven’t found nothing browsing the docs) to
assure that a UserSession can’t be created if the User already has an UserSession object?

In other words: I want to make sure that a user can’t log in twice with the same credentials.

UPDATE: Check the comments on thief’s answer to find the solution to this problem.

Answer 1

in your user sessions controller:

    before_filter :require_no_user, :only => [:new, :create]

in your app controller:

def require_no_user
  if current_user
    store_location
    flash[:notice] = "You must be logged out to access this page"
    redirect_to account_url
    return false
  end
end