user_auth_token_logs를 정리해야 하나요?

Osama · 9월 16, 2024, 8:15오후

네, 대부분의 로그는 정리할 수 있다고 생각합니다. 하지만 일부는 유지해야 합니다. 구체적으로, action이 suspicious, generate, 또는 rotate인 기록은 의심스러운 로그인 탐지 및 관련 보고서 생성에 사용되므로 유지해야 한다고 생각합니다.

github.com/discourse/discourse

app/models/concerns/reports/suspicious_logins.rb

501f07ab1


      
              title: I18n.t("reports.suspicious_logins.labels.login_time"),
            },
          ]
          
          report.data = []
          
          sql = <<~SQL
            SELECT u.id user_id, u.username, u.uploaded_avatar_id, t.client_ip, t.user_agent, t.created_at login_time
            FROM user_auth_token_logs t
            JOIN users u ON u.id = t.user_id
            WHERE t.action = 'suspicious'
              AND t.created_at >= :start_date
              AND t.created_at <= :end_date
            ORDER BY t.created_at DESC
          SQL
          
          DB
            .query(sql, start_date: report.start_date, end_date: report.end_date)
            .each do |row|
              data = {}

github.com/discourse/discourse

app/models/user_auth_token.rb

501f07ab1


      
              Math.sin((lat2_rad - lat1_rad) / 2)**2 +
                Math.cos(lat1_rad) * Math.cos(lat2_rad) * Math.sin((lon2_rad - lon1_rad) / 2)**2
            c = 2 * Math.atan2(Math.sqrt(a), Math.sqrt(1 - a))
          
            c * EARTH_RADIUS_KM
          end
          
          def self.is_suspicious(user_id, user_ip)
            return false unless User.find_by(id: user_id)&.staff?
          
            ips = UserAuthTokenLog.where(user_id: user_id).pluck(:client_ip)
            ips.delete_at(ips.index(user_ip) || ips.length) # delete one occurrence (current)
            ips.uniq!
            return false if ips.empty? # first login is never suspicious
          
            if user_location = login_location(user_ip)
              ips.none? do |ip|
                if location = login_location(ip)
                  distance(user_location, location) < SiteSetting.max_suspicious_distance_km
                end
              end

글		댓글	조회수
User anonymization and staff_action_logs Product Support	6	810	8월 9, 2021
Logging checked_for_custom_avatar Bug	7	1185	1월 2, 2015
How to remove admin logs Product Support	13	2742	11월 14, 2023
Is there a limit to user_auth_token? Product Support	3	602	10월 17, 2018
Reset all login tokens Feature	7	2277	5월 20, 2016

user_auth_token_logs를 정리해야 하나요?

Related topics