Login logging

leonprof2001 · February 20, 2022, 1:50pm

I sometimes get the notification that there was a failed login attempt. But after that you don’t know it. Did they succesfully login after that? Could there be a kind of of Login Log where you can see what IP was loggjng in, what user they were logging in to and if it was successful or not.

ondras12345 · February 25, 2022, 12:43pm

Don’t forget to vote for your own feature request.

From looking at the source code, it seems like this should already be possible. A message with level DEBUG is logged on a successful login.

github.com

home-assistant/core/blob/cbdfff25ca510a5d7dff9a1cb39ce2da8afc7d65/homeassistant/components/http/ban.py#L184

    
      
          
          
    # Check if ban middleware is loaded
              if KEY_BANNED_IPS not in request.app or request.app[KEY_LOGIN_THRESHOLD] < 1:
                  return
          
          
    if (
                  remote_addr in request.app[KEY_FAILED_LOGIN_ATTEMPTS]
                  and request.app[KEY_FAILED_LOGIN_ATTEMPTS][remote_addr] > 0
              ):
                  _LOGGER.debug(
                      "Login success, reset failed login attempts counter from %s", remote_addr
                  )
                  request.app[KEY_FAILED_LOGIN_ATTEMPTS].pop(remote_addr)
          
          

          
class IpBan:
              """Represents banned IP address."""
          
          
    def __init__(
                  self,
                  ip_ban: str | IPv4Address | IPv6Address,

You’ll need to configure your logger to not ignore debug messages from homeassistant.components.http.ban.

dbrunt · May 4, 2023, 5:32am

This only logs a successful login after it has previously failed, and also resets the failed login counter back to zero for that IP failure…

dbrunt · May 4, 2023, 6:03am

I was trying to determine the IP I was connecting from (don’t ask…it’s a complicated setup involving Todyl SGN Connect tunneling for a project I am working on from home) so I could add it to my trusted networks. The only option I could think of was to trigger 5 login failures and then I used SSH to see the IP in ip_bans.yaml, deleted the entry, added the IP to known_networks + trusted_users and did ha core restart.

We need a better way!

heisenberg · July 13, 2023, 8:31pm

This logging and notification was possible with this component, and it was very useful as it is a security concern that someone can login into your HA instance without you noticing: GitHub - custom-components/authenticated: A platform which allows you to get information about sucessfull logins to Home Assistant.

Unfortunally for some reason the component was deprecated last year and it doesn´t seem to be any alternative available.

PedroKTFC · October 13, 2023, 5:45pm

Given how important HA is to the monitoring and control of our homes, I think it should be one of the most important security features to be able to see who logs in, who tries to log in, when and from where. I’ve enabled 2FA for myself but my wife, with restricted access, doesn’t use 2FA. So there’s a hole there that’s hard to plug but I’d at least like to know if she has logged on when she hasn’t (ie someone has guessed her password).

jabronimus · July 5, 2024, 7:14pm

I was looking for this as well. Seems like there are a number of forks of the original. One that seems recently updated and that I was able to install through HACS is:

JOHLC · July 16, 2024, 9:44pm

@jabronimus Is it working for you on the latest version of Home Assistant? (2024.7.2)

I just get an ‘unknown’ sensor now, where it was working before.