simplesamlphp-module-webauthn
simplesamlphp-module-webauthn copied to clipboard
RFE: Make a note of the last usage time and IP address of the token
The number of uses is shown in the signCounter column of the fido2 database credentials table, but perhaps the last usage time and IP address would be useful.
If I could dream big, then - let's say - the last 20 uses would be useful.
Thank you in advance for your help.
signCounter is recorded in the DB because the protocol requires it (physical object cloning detection).
Last use time is probably useful to record and show to a human in UI, but it's not strictly required. I'll keep it as nice-to-have feature request but especially given that this would then need DB work, backend and frontend UI, this is more work than I can currently invest.
And IP addresses... those have stopped being particularly useful in the 1990s. I don't see much point in recording those.
Last use time is probably useful to record and show to a human in UI, but it's not strictly required.
Of course, I agree that these are primarily important in the user interface.
And IP addresses... those have stopped being particularly useful in the 1990s. I don't see much point in recording those.
I'm very sorry, but not only me, but also google disagree with this position on this issue: Last account activity - Gmail Help .
Since this was just wishful thinking on my part, I readily accept that it does not take developers' time to implement this.
I am grateful that they are doing their job for the public!
Schema changes are now done in master.