Keep track of login history of every user

[weatherwood]

Please describe the problem you'd like to be solved. As a admin user, I want to have an overview of the login history of every user in the dashboard.

Describe the solution you'd like to see implemented. For each login/session in the dashboard, the following data should be logged:

• username
• email
• ip-address
• login date/time
• logout date/time

The data should be available for admin users in the dashboard. A simple csv download of the complete login history would be sufficient, as this can easily be imported into a spreadsheet application for further searching/filtering.

Describe alternatives you've considered.

Additional context Logging of user logins is a minimal requirement for certification of the digital repository. Currently, Archivematica only logs the last login of each user.

---

For Artefactual use: Please make sure these steps are taken before moving this issue from Review to Verified in Waffle:

• All PRs related to this issue are properly linked 👍
• All PRs related to this issue have been merged 👍
• Test plan for this issue has been implemented and passed 👍
• Documentation regarding this issue has been written and it has been added to the release notes, if needed 👍

[peterVG]

By using CSV export of the login history this describes the minimum effort to add user login auditing to Archivematica. The most difficult piece would be to get accurate logout data as I believe the application currently uses a cookie to keep users logged in indefinitely.

[weatherwood]

Hi Peter, That makes sense to me. I'll discuss with our customers if the logout data is really required.

[ross-spencer]

@pwoltjer directing you at some of the work around this issue: https://github.com/archivematica/Issues/issues/1341 in case it is of interest.