security(web): add lastLoginAt

[McPizza0]

we should save the last time a user has logged in to the database this could be done when we create a session for the user

the data would be used to check for active/inactive users by combining lastLoginAt with a check on active sessions

[skushagra9]

Its the extension in the security page right ?

[McPizza0]

no this is more database/backend

[skushagra9]

got it thanks

[babblebey]

Project here is some great stuff @McPizza0 😉

The changes looks like it should be made in the following files

• apps/web-app/server/trpc/routers/authRouter/signupRouter
• apps/web-app/server/trpc/routers/authRouter/passwordRouter
• apps/web-app/server/trpc/routers/authRouter/passkeyRouter

Of course after modifying the database schema adding the new field lastLoginAt of datetime/timestamp type with no defaults in...

packages/database/schema.ts

This field will get an initial value at execution of the signupRouter after the lucia session can be confirmed as successfully created session.

Then the field can get updated at login, when the passwordRouter or passkeyRouter shoots after the session can be confirmed as successfully created session.

Correct me if I'm off here 🫣

the data would be used to check for active/inactive users by combining lastLoginAt with a check on active sessions

How'd you mean here though?? Is this some thoughts around the use case of this field?? Or you're looking to include this in the implementation??? 🤔

[McPizza0]

@babblebey ! yes you got the idea right re: checking active; this would just be done manually - not a feature in app a lightweight product analytics

[babblebey]

Great! I'd like to take a dig at this, if you assign me 😉

Thanks 😁

[McPizza0]

Epic!