{"action":"opened","issue":{"url":"https://api.github.com/repos/matomo-org/matomo/issues/13376","repository_url":"https://api.github.com/repos/matomo-org/matomo","labels_url":"https://api.github.com/repos/matomo-org/matomo/issues/13376/labels{/name}","comments_url":"https://api.github.com/repos/matomo-org/matomo/issues/13376/comments","events_url":"https://api.github.com/repos/matomo-org/matomo/issues/13376/events","html_url":"https://github.com/matomo-org/matomo/issues/13376","id":356164841,"node_id":"MDU6SXNzdWUzNTYxNjQ4NDE=","number":13376,"title":"Keep track of recognized user agents for more security","user":{"login":"diosmosis","id":125140,"node_id":"MDQ6VXNlcjEyNTE0MA==","avatar_url":"https://avatars1.githubusercontent.com/u/125140?v=4","gravatar_id":"","url":"https://api.github.com/users/diosmosis","html_url":"https://github.com/diosmosis","followers_url":"https://api.github.com/users/diosmosis/followers","following_url":"https://api.github.com/users/diosmosis/following{/other_user}","gists_url":"https://api.github.com/users/diosmosis/gists{/gist_id}","starred_url":"https://api.github.com/users/diosmosis/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/diosmosis/subscriptions","organizations_url":"https://api.github.com/users/diosmosis/orgs","repos_url":"https://api.github.com/users/diosmosis/repos","events_url":"https://api.github.com/users/diosmosis/events{/privacy}","received_events_url":"https://api.github.com/users/diosmosis/received_events","type":"User","site_admin":false},"labels":[{"id":112370581,"node_id":"MDU6TGFiZWwxMTIzNzA1ODE=","url":"https://api.github.com/repos/matomo-org/matomo/labels/c:%20Security","name":"c: Security","color":"fad8c7","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-09-01T02:45:42Z","updated_at":"2018-09-01T02:45:42Z","closed_at":null,"author_association":"MEMBER","body":"This feature would be akin to what facebook does.\r\n\r\n* Matomo would keep track of logged in IPs & user agents.\r\n* When a new, unknown IP/user agent logs in when there is another existing session, the existing session must approve the new device.\r\n* In the admin area a user should be able to see the list of recognized devices and their last logins/login attempts.\r\n\r\nThis could also tie into a two factor auth feature, if a new device is used and there is no existing session, could require doing two factor auth for that login as an extra step."}}
{"actor":{"display_login":"diosmosis"}}