API Add Device Information to Session API

[JoseSzycho]

Description

Update the current Session resource to include device-specific metadata. This is required for security auditing and to allow users to identify active devices in the Cloud Portal

Proposed Changes

• Extend Schema: Add a device field to the Session object containing:
  • OS: (e.g., macOS, iOS, Windows)
  • Browser/Client: (e.g., Chrome, Safari, Milo-CLI)
  • Type: (e.g., Desktop, Mobile, Tablet)
• Extraction: Implement logic to parse this information from the User-Agent header during session creation.

[JoseSzycho]

https://zitadel.com/docs/apis/resources/session_service_v2/session-service-list-sessions also brings the userAgent information.

{
    "details": {
        "totalResult": "862",
        "timestamp": "2026-01-19T13:59:49.364043Z"
    },
    "sessions": [
        {
            "id": "330196502439791244",
            "creationDate": "2025-07-23T22:07:33.470569Z",
            "changeDate": "2025-07-23T22:07:33.470569Z",
            "sequence": "5",
            "factors": {
                "user": {
                    "verifiedAt": "2025-07-23T22:07:32.346974Z",
                    "id": "330196500258753164",
                    "organizationId": "325848896225939482"
                },
                "password": {
                    "verifiedAt": "2025-07-23T22:07:33.470060Z"
                }
            },
            "userAgent": {
                "fingerprintId": "69023ac6-d06d-4fa8-a7be-a0218ab4013a",
                "ip": "152.169.219.226",
                "description": "Safari, 18.5, ,  Apple, Macintosh, , WebKit, 605.1.15, , Mac OS, 10.15.7, ",
                "header": {
                    "user-agent": {
                        "values": [
                            "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML",
                            " like Gecko) Version/18.5 Safari/605.1.15"
                        ]
                    }
                }
            },
            "expirationDate": "2025-08-02T22:07:33.470569Z"
        }
    ]
}

We should update the custom API to include the user-agent