Repository navigation
Login on new device notifications #9390
Replies: 1 comment 3 replies
|
The solution could be split into:
To display information to the user, the user agent string must be analyzed so that browser and operating system can be shown. Project yauaa does resolve info like device class, brand, operating system, etc. For part 1 it also has to be discussed which info is used and stored to recognize a client as an existing one. Does anyone know of published best-practices how to do it? |
|
If you have offline sessions you actually can detect a device for a kind of infinite time. |
|
Yes, a device is identified as new if it can't be recognized either by a information provided by the browser (i.e. user agent info or other fingerprinting techniques) or by a cookie which was placed there before by Keycloak. It could also be a combination. I would like to discuss and understand which information is extracted and stored client (browser) and server-side to identify a client. A simple logic would be a cookie so that a device is always a new one when this cookie isn't send. This is probably the 'magic signed cookie on the device' @stianst talked about in the KEYCLOAK-4124 comment. This also lists the idea to have new kind of sessions. |
|
I like the idea to have a new event when a new device is detected. I think the part 1 could be sufficient in a first step allowing users to write a SPI handling this event. |
Uh oh!
There was an error while loading. Please reload this page.
Hello,
I would like to send a mail notification to my users when a session is opened on a new device. Could this be implemented in Keycloak ?
I can try to implement something if you decide this is a good idea to have it in keycloak core.
PS : The JIRA KEYCLOAK-4124 which propose the same thing was closed in 2019 as out of date.
All reactions