kobotoolbox / kpi
82%
master: 76%

LAST BUILD BRANCH: main
DEFAULT BRANCH: master
Repo Added
Files 896
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH release/2.026.25
branch: release/2.026.25
CHANGE BRANCH
x

coverage: 81.612% (+0.003%) from 81.609%
28034696683

push

github

web-flow 
feat(auth): add failed login attempts DEV-2276 (#7166)

### 📣 Summary
Added application-level logging for failed login attempts and exposed
them in the access logs UI and API

### 📖 Description
Failed authentications are tracker similar to how successful logins are
recorded, using audit logs. It also tracks failed logins for
non-existent accounts to help identify automated attacks (e.g. repeated
attempts across random usernames from a single IP).

* For this it hooks into Django's user_login_failed signal to create
AccessLog entries with a new AUTH_FAILED action. Safely handles
instances without an attached HTTP request or user object
* Updated AccessLogSerializer to expose the new action attribute. For
non-existent accounts where the user relationship is null, it falls back
to exposing the attempted_username stored in the metadata
* Updated OpenAPI outputs and TypeScript models to include action. Added
a "Status" column to the AccessLogsSection component table to clearly
distinguish between Success and Failed logins.

### 👀 Preview steps
1. Log into your account and navigate to Account Settings -> Security
2. Open an incognito window and attempt to log in with your valid
username but an incorrect password
3. Attempt to log in again using a non-existent username
4. Refresh the Security page on your active session. In the Recent
account activity table, you should see your failed attempt marked as
"Failed" under the new Status column.
5. Query the /api/v2/access-logs/ endpoint and verify that the failed
login for the non-existent account was also successfully logged and
tracked.

---------

Signed-off-by: Guillermo <lgar89@gmail.com>
Co-authored-by: Olivier Léger <olivierleger@gmail.com>

9074 of 12315 branches covered (73.68%)

35 of 50 new or added lines in 5 files covered. (70.0%)

1 existing line in 1 file now uncovered.

29812 of 36529 relevant lines covered (81.61%)

5.56 hits per line

Relevant lines Covered
36529 RELEVANT LINES 29812 COVERED LINES
5.56 HITS PER LINE
Source Files on release/2.026.25

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
28034696683 release/2.026.25 feat(auth): add failed login attempts DEV-2276 (#7166) ### 📣 Summary Added application-level logging for failed login attempts and exposed them in the access logs UI and API ### 📖 Description Failed authentications are tracker similar to how suc... push web-flow github
81.61
27698100389 release/2.026.25 fix(tests): fix failing google transcribe test DEV-2298 (#7160) ### 📣 Summary Fix failing google transcribe test push web-flow github
81.61
See All Builds (13322)