Send Login E-Mails

[niklas2810]

Description

It would be super cool if Firefly III would notify me whenever someone logs into my Firefly instance!

Solution

Send an email to the user's address whenever someone logs in to the user's account.

IMO, this should be an optional feature (as some users might be annoyed by such notifications), therefore an entry on the configuration page would be nice.

What are alternatives?

A breadcrumb inside of Firefly III for other sessions, but I guess that an email would be more suitable as you have to be active at the time.

Bonus points

The message text could look like this, it's inspired by already existing message texts:

Hi there,

Somebody (hopefully you) just logged into your Firefly III instance at {URL}. 

(Optional: User Agent/IP address)

If this wasn't you, please change your password and invalidate sessions immediately via {URL}/profile/logout-others.

Beep boop,

The Firefly III Mail Robot

[JC5]

I was thinking something similar recently. I like the idea. I also thought to send messages for new IP's only. What do you think?

[niklas2810]

Sounds great! Such a feature could prevent users from getting annoyed by these notifications. I think would make sense to mark these IPs with an expiration date (e.g. 6 months) then, so these logged addresses won't be valid forever (even though it is not very likely that an intruder will have the same IP address, it's rather a measure to remind to user that they will receive notifications for new logins). Edit: This feature should be explicitly mentioned in the email text then to tell the user what's going on 😄

I'm not very familiar with Firefly's internal structure, but if adding an environment variable check is not that complicated, you could also provide a configuration option in the .env file to let users choose whether they want the "trusted" IP feature to be active (which could be the default value) or alternatively, want to receive an email for every new login.

[JC5]

[niklas2810]

This looks great, thanks!

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.