simplesamlphp-module-webauthn icon indicating copy to clipboard operation
simplesamlphp-module-webauthn copied to clipboard

RFE: Make a note of the last usage time and IP address of the token

Open polakovi opened this issue 9 months ago • 3 comments

The number of uses is shown in the signCounter column of the fido2 database credentials table, but perhaps the last usage time and IP address would be useful.

If I could dream big, then - let's say - the last 20 uses would be useful.

Thank you in advance for your help.

polakovi avatar Feb 11 '25 15:02 polakovi

signCounter is recorded in the DB because the protocol requires it (physical object cloning detection).

Last use time is probably useful to record and show to a human in UI, but it's not strictly required. I'll keep it as nice-to-have feature request but especially given that this would then need DB work, backend and frontend UI, this is more work than I can currently invest.

And IP addresses... those have stopped being particularly useful in the 1990s. I don't see much point in recording those.

restena-sw avatar Feb 14 '25 14:02 restena-sw

Last use time is probably useful to record and show to a human in UI, but it's not strictly required.

Of course, I agree that these are primarily important in the user interface.

And IP addresses... those have stopped being particularly useful in the 1990s. I don't see much point in recording those.

I'm very sorry, but not only me, but also google disagree with this position on this issue: Last account activity - Gmail Help .

Since this was just wishful thinking on my part, I readily accept that it does not take developers' time to implement this.

I am grateful that they are doing their job for the public!

polakovi avatar Feb 14 '25 21:02 polakovi

Schema changes are now done in master.

restena-sw avatar Apr 17 '25 08:04 restena-sw