feat/login log

model/auth.py

@@ -116,7 +116,7 @@ def login(username, password):
             - 403 Login Failed
         '''
         try:
-            user = User.login(username, password)
+            user = User.login(request, username, password)
         except DoesNotExist:
             return HTTPError('Login Failed', 403)
         if not user.active:

mongo/engine.py

@@ -254,7 +254,7 @@ def escape(self):
                 self.input,
                 self.output,
                 self.hint,
-            ))
+        ))
         _io = zip(self.sample_input, self.sample_output)
         for i, (ip, op) in enumerate(_io):
             self.sample_input[i] = ip or html.escape(ip)
@@ -460,3 +460,10 @@ class SubmissionConfig(Config):
         ],
         db_field='sandboxInstances',
     )
+
+
+class LoginRecords(Document):
+    user_id = StringField(db_field='userId', max_length=24, required=True)
+    success = BooleanField(default=False)
+    ip_addr = StringField(default=None, null=True)
+    last_login = DateTimeField(default=datetime.min)

mongo/login_record.py

@@ -0,0 +1,22 @@
+from datetime import datetime
+from . import engine
+from .base import *
+
+class LoginRecord(MongoBase, engine=engine.LoginRecords):
+    @classmethod
+    def record_login(cls, user_id, ip_addr, success)->None:
+        cls.engine(
+            user_id=user_id,
+            ip_addr=ip_addr,
+            success=success,
+            last_login=datetime.now()
+        ).save(force_insert=True)
+
+    @classmethod
+    def get_records_by_ip(cls, ip_addr):
+        return cls.engine.objects.get(ip_addr=ip_addr)
+
+
+    @classmethod
+    def get_records_by_user_id(cls, user_id):
+        return cls.engine.objects.get(user_id=user_id)

mongo/user.py

@@ -3,7 +3,7 @@
 from hmac import compare_digest
 from typing import Any, Dict, List, TYPE_CHECKING, Optional
 
-from . import engine, course
+from . import engine, course, login_record
 from .utils import *
 from .base import *
 
@@ -121,15 +121,17 @@ def force_update(self, new_user: Dict[str, Any], course: Optional[Course]):
         self.reload()
 
     @classmethod
-    def login(cls, username, password):
+    def login(cls, request, username, password):
         try:
             user = cls.get_by_username(username)
         except engine.DoesNotExist:
             user = cls.get_by_email(username)
         user_id = hash_id(user.username, password)
         if (compare_digest(user.user_id, user_id)
                 or compare_digest(user.user_id2, user_id)):
+            login_record.LoginRecord.record_login(user_id, request.remote_addr, True)
             return user
+        login_record.LoginRecord.record_login(user_id, request.remote_addr, False)
         raise engine.DoesNotExist
 
     @classmethod