PHPackages                             rappasoft/laravel-authentication-log - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. [Authentication & Authorization](/categories/authentication)
4. /
5. rappasoft/laravel-authentication-log

ActiveLibrary[Authentication & Authorization](/categories/authentication)

rappasoft/laravel-authentication-log
====================================

Log user authentication details and send new device notifications.

v6.0.1(5mo ago)9671.6M—2.3%113[3 PRs](https://github.com/rappasoft/laravel-authentication-log/pulls)10MITPHPPHP ^8.1

Since Oct 1Pushed 5mo ago19 watchersCompare

[ Source](https://github.com/rappasoft/laravel-authentication-log)[ Packagist](https://packagist.org/packages/rappasoft/laravel-authentication-log)[ Docs](https://github.com/rappasoft/laravel-authentication-log)[ GitHub Sponsors](https://github.com/rappasoft)[ RSS](/packages/rappasoft-laravel-authentication-log/feed)WikiDiscussions main Synced 1mo ago

READMEChangelog (10)Dependencies (8)Versions (14)Used By (10)

[![Package Logo](https://camo.githubusercontent.com/f363b6f9c8ddee5b6a6bcc459ad3fae669b239fdbe40e905268056b701babb77/68747470733a2f2f62616e6e6572732e6265796f6e64636f2e64652f4c61726176656c25323041757468656e7469636174696f6e2532304c6f672e706e673f7468656d653d6461726b267061636b6167654d616e616765723d636f6d706f7365722b72657175697265267061636b6167654e616d653d7261707061736f66742532466c61726176656c2d61757468656e7469636174696f6e2d6c6f67267061747465726e3d686964656f7574267374796c653d7374796c655f31266465736372697074696f6e3d4c6f672b757365722b61757468656e7469636174696f6e2b64657461696c732b616e642b73656e642b6e65772b6465766963652b6e6f74696669636174696f6e732e266d643d312673686f7757617465726d61726b3d3026666f6e7453697a653d313030707826696d616765733d6c6f636b2d636c6f736564)](https://camo.githubusercontent.com/f363b6f9c8ddee5b6a6bcc459ad3fae669b239fdbe40e905268056b701babb77/68747470733a2f2f62616e6e6572732e6265796f6e64636f2e64652f4c61726176656c25323041757468656e7469636174696f6e2532304c6f672e706e673f7468656d653d6461726b267061636b6167654d616e616765723d636f6d706f7365722b72657175697265267061636b6167654e616d653d7261707061736f66742532466c61726176656c2d61757468656e7469636174696f6e2d6c6f67267061747465726e3d686964656f7574267374796c653d7374796c655f31266465736372697074696f6e3d4c6f672b757365722b61757468656e7469636174696f6e2b64657461696c732b616e642b73656e642b6e65772b6465766963652b6e6f74696669636174696f6e732e266d643d312673686f7757617465726d61726b3d3026666f6e7453697a653d313030707826696d616765733d6c6f636b2d636c6f736564)

[![Latest Version on Packagist](https://camo.githubusercontent.com/282f7437506231853a2dbe098bb00b236c79a668ef6cea995d380a3bebfd17e3/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f762f7261707061736f66742f6c61726176656c2d61757468656e7469636174696f6e2d6c6f672e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/rappasoft/laravel-authentication-log)[![Total Downloads](https://camo.githubusercontent.com/660d12a43620bd414c55fc4e882db38fdf2ffa89abcc340fa284dfccecfbff41/68747470733a2f2f696d672e736869656c64732e696f2f7061636b61676973742f64742f7261707061736f66742f6c61726176656c2d61757468656e7469636174696f6e2d6c6f672e7376673f7374796c653d666c61742d737175617265)](https://packagist.org/packages/rappasoft/laravel-authentication-log)

Laravel Authentication Log is a comprehensive package which tracks your user's authentication information such as login/logout time, IP, Browser, Location, Device Fingerprint, etc. It sends out notifications via mail, slack, or SMS for new devices and failed logins, detects suspicious activity, provides session management, prevents duplicate log entries from session restorations, and much more.

**Version 6.0.0** introduces major enhancements including session restoration prevention, improved device fingerprinting, enhanced statistics, and more. See the [Release Notes](RELEASE_NOTES.md) for complete details.

Features
--------

[](#features)

### Core Features

[](#core-features)

- ✅ **Authentication Logging** - Tracks all login/logout attempts with IP, user agent, location, and timestamps
- ✅ **Device Fingerprinting** - Reliable device identification using SHA-256 hashing with browser version normalization (prevents false positives)
- ✅ **New Device Detection** - Automatically detects and notifies users of new device logins
- ✅ **Failed Login Tracking** - Logs and optionally notifies users of failed login attempts
- ✅ **Location Tracking** - Optional GeoIP integration for location data
- ✅ **Session Restoration Prevention** - Automatically prevents duplicate log entries from page refreshes and remember me cookies

### Advanced Features

[](#advanced-features)

- 🔒 **Suspicious Activity Detection** - Automatically detects multiple failed logins, rapid location changes, and unusual login times
- 📊 **Statistics & Insights** - Get comprehensive login statistics including total logins, failed attempts, unique devices, and more
- 🔐 **Session Management** - View active sessions, revoke specific sessions, or logout all other devices
- 🛡️ **Device Trust Management** - Mark devices as trusted, manage device names, and require trusted devices for sensitive actions
- ⚡ **Rate Limiting** - Prevents notification spam with configurable rate limits
- 🔔 **Webhook Support** - Send webhooks to external services for authentication events
- 📤 **Export Functionality** - Export authentication logs to CSV or JSON format
- 🎯 **Query Scopes** - Powerful query scopes for filtering logs (successful, failed, suspicious, recent, by IP, by device, etc.)
- 🚦 **Middleware** - Protect routes with trusted device middleware

Documentation, Installation, and Usage Instructions
---------------------------------------------------

[](#documentation-installation-and-usage-instructions)

See the [documentation](https://rappasoft.com/docs/laravel-authentication-log) for detailed installation and usage instructions.

Version Compatibility
---------------------

[](#version-compatibility)

LaravelAuthentication LogFeatures8.x1.xBasic logging only9.x2.xBasic logging only10.x3.xBasic logging only11.x5.x, 6.xAll features (device fingerprinting, suspicious activity, webhooks, session management, etc.)12.x5.x, 6.xAll features (device fingerprinting, suspicious activity, webhooks, session management, etc.)**Note:** Version 6.x requires Laravel 11.x or 12.x and PHP 8.1+. Version 5.x also supports Laravel 11.x and 12.x. For Laravel 10.x support, please use version 3.x.

Installation
------------

[](#installation)

```
composer require rappasoft/laravel-authentication-log
```

Quick Start
-----------

[](#quick-start)

### 1. Add the Trait to Your User Model

[](#1-add-the-trait-to-your-user-model)

```
use Rappasoft\LaravelAuthenticationLog\Traits\AuthenticationLoggable;

class User extends Authenticatable
{
    use AuthenticationLoggable;
}
```

### 2. Publish and Run Migrations

[](#2-publish-and-run-migrations)

**For new installations:**

```
php artisan vendor:publish --provider="Rappasoft\LaravelAuthenticationLog\LaravelAuthenticationLogServiceProvider" --tag="authentication-log-migrations"
php artisan migrate
```

**For existing installations (upgrading from v5.x or earlier):**

```
# Update the package
composer update rappasoft/laravel-authentication-log

# Publish the upgrade migration (if upgrading from v3.x or earlier)
php artisan vendor:publish --provider="Rappasoft\LaravelAuthenticationLog\LaravelAuthenticationLogServiceProvider" --tag="authentication-log-migrations"

# Run the migrations (the upgrade migration will only add columns if they don't exist)
php artisan migrate
```

**Important:** If upgrading from v3.x or earlier, the upgrade migration will safely add the new columns (`device_id`, `device_name`, `is_trusted`, `last_activity_at`, `is_suspicious`, `suspicious_reason`) to your existing `authentication_log` table without affecting existing data.

**Breaking Changes in v6.0.0:**

- Laravel 10.x support has been dropped (only Laravel 11.x and 12.x are supported)
- PHP 8.1+ is now required
- See the [Upgrade Guide](docs/start/upgrade.md) for detailed migration instructions

### 3. Configure (Optional)

[](#3-configure-optional)

```
php artisan vendor:publish --provider="Rappasoft\LaravelAuthenticationLog\LaravelAuthenticationLogServiceProvider" --tag="authentication-log-config"
```

Usage Examples
--------------

[](#usage-examples)

### Get User Statistics

[](#get-user-statistics)

```
$user = User::find(1);

// Get comprehensive statistics
$stats = $user->getLoginStats();
// Returns: total_logins, failed_attempts, unique_devices, unique_ips, last_30_days, etc.

// Or get individual stats
$totalLogins = $user->getTotalLogins();
$failedAttempts = $user->getFailedAttempts();
$uniqueDevices = $user->getUniqueDevicesCount();
```

### Session Management

[](#session-management)

```
// Get all active sessions
$activeSessions = $user->getActiveSessions();
$sessionCount = $user->getActiveSessionsCount();

// Revoke a specific session
$user->revokeSession($sessionId);

// Revoke all other sessions (keep current device)
$user->revokeAllOtherSessions($currentDeviceId);

// Revoke all sessions
$user->revokeAllSessions();
```

### Device Management

[](#device-management)

```
// Get all user devices
$devices = $user->getDevices();

// Trust a device
$user->trustDevice($deviceId);

// Untrust a device
$user->untrustDevice($deviceId);

// Update device name
$user->updateDeviceName($deviceId, 'My iPhone');

// Check if device is trusted
if ($user->isDeviceTrusted($deviceId)) {
    // Device is trusted
}
```

### Query Scopes

[](#query-scopes)

```
use Rappasoft\LaravelAuthenticationLog\Models\AuthenticationLog;

// Filter successful logins
$successfulLogins = AuthenticationLog::successful()->get();

// Filter failed logins
$failedLogins = AuthenticationLog::failed()->get();

// Filter by IP address
$ipLogs = AuthenticationLog::fromIp('192.168.1.1')->get();

// Filter recent logs (last 7 days)
$recentLogs = AuthenticationLog::recent(7)->get();

// Filter suspicious activities
$suspicious = AuthenticationLog::suspicious()->get();

// Filter active sessions
$activeSessions = AuthenticationLog::active()->get();

// Filter trusted devices
$trustedDevices = AuthenticationLog::trusted()->get();

// Filter by device ID
$deviceLogs = AuthenticationLog::fromDevice($deviceId)->get();

// Filter for specific user
$userLogs = AuthenticationLog::forUser($user)->get();
```

### Suspicious Activity Detection

[](#suspicious-activity-detection)

```
// Detect suspicious activity
$suspiciousActivities = $user->detectSuspiciousActivity();

// Returns array of suspicious activities:
// [
//     [
//         'type' => 'multiple_failed_logins',
//         'count' => 5,
//         'message' => '5 failed login attempts in the last hour'
//     ],
//     [
//         'type' => 'rapid_location_change',
//         'countries' => ['US', 'UK'],
//         'message' => 'Login from multiple countries within an hour'
//     ]
// ]
```

### Middleware for Trusted Devices

[](#middleware-for-trusted-devices)

```
use Rappasoft\LaravelAuthenticationLog\Middleware\RequireTrustedDevice;

// In your routes file
Route::middleware(['auth', RequireTrustedDevice::class])->group(function () {
    // These routes require a trusted device
    Route::get('/sensitive-action', [Controller::class, 'sensitiveAction']);
});
```

### Export Logs

[](#export-logs)

```
# Export all logs to CSV
php artisan authentication-log:export --format=csv

# Export to JSON
php artisan authentication-log:export --format=json

# Specify custom output path
php artisan authentication-log:export --format=csv --path=storage/app/logs.csv
```

### Webhook Configuration

[](#webhook-configuration)

Add webhooks to your `config/authentication-log.php`:

```
'webhooks' => [
    [
        'url' => 'https://example.com/webhook',
        'events' => ['login', 'failed', 'new_device', 'suspicious'],
        'headers' => [
            'Authorization' => 'Bearer your-token',
        ],
    ],
],
```

Configuration
-------------

[](#configuration)

The package includes comprehensive configuration options:

- **Notifications** - Configure new device and failed login notifications with rate limiting
- **Suspicious Activity** - Configure thresholds and detection rules
- **Webhooks** - Set up webhook endpoints for external integrations
- **Database** - Customize table name and database connection
- **Session Restoration** - Configure session restoration prevention (prevents duplicate log entries)
- **New User Threshold** - Configure time window for new user detection

See the [configuration documentation](https://rappasoft.com/docs/laravel-authentication-log/start/configuration) for all available options.

Testing
-------

[](#testing)

```
composer test
```

Changelog
---------

[](#changelog)

Please see [CHANGELOG](CHANGELOG.md) for more information on what has changed recently.

Contributing
------------

[](#contributing)

Please see [CONTRIBUTING](.github/CONTRIBUTING.md) for details.

Security Vulnerabilities
------------------------

[](#security-vulnerabilities)

Please review [our security policy](../../security/policy) on how to report security vulnerabilities.

Credits
-------

[](#credits)

- [Anthony Rappa](https://github.com/rappasoft)
- [yadahan/laravel-authentication-log](https://github.com/yadahan/laravel-authentication-log)
- [All Contributors](../../contributors)

License
-------

[](#license)

The MIT License (MIT). Please see [License File](LICENSE.md) for more information.

###  Health Score

63

—

FairBetter than 99% of packages

Maintenance71

Regular maintenance activity

Popularity65

Solid adoption and visibility

Community38

Small or concentrated contributor base

Maturity66

Established project with proven stability

 Bus Factor1

Top contributor holds 71.3% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

###  Release Activity

Cadence

Every ~139 days

Recently: every ~254 days

Total

12

Last Release

161d ago

Major Versions

v1.3.0 → v2.0.02022-02-19

v2.0.0 → v3.0.02023-02-23

v3.0.0 → v4.0.02024-03-30

v4.0.0 → v5.0.02025-03-25

v5.0.0 → v6.0.02025-12-05

PHP version history (3 changes)v1.0.0PHP ^8.0

v1.2.0PHP ^7.4|^8.0

v3.0.0PHP ^8.1

### Community

Maintainers

![](https://www.gravatar.com/avatar/7391f7cc3ee64ecd12d948708b2c3d901d2baa20f34a16523b9d7f2e167abb5b?d=identicon)[rappa819](/maintainers/rappa819)

---

Top Contributors

[![rappasoft](https://avatars.githubusercontent.com/u/6026504?v=4)](https://github.com/rappasoft "rappasoft (114 commits)")[![lrljoe](https://avatars.githubusercontent.com/u/104938042?v=4)](https://github.com/lrljoe "lrljoe (9 commits)")[![forxer](https://avatars.githubusercontent.com/u/407917?v=4)](https://github.com/forxer "forxer (7 commits)")[![laravel-shift](https://avatars.githubusercontent.com/u/15991828?v=4)](https://github.com/laravel-shift "laravel-shift (5 commits)")[![t0nka](https://avatars.githubusercontent.com/u/4823546?v=4)](https://github.com/t0nka "t0nka (5 commits)")[![publiux](https://avatars.githubusercontent.com/u/2847188?v=4)](https://github.com/publiux "publiux (3 commits)")[![JustinByrne](https://avatars.githubusercontent.com/u/14056930?v=4)](https://github.com/JustinByrne "JustinByrne (2 commits)")[![MathieuMaas](https://avatars.githubusercontent.com/u/34303750?v=4)](https://github.com/MathieuMaas "MathieuMaas (2 commits)")[![mstralka](https://avatars.githubusercontent.com/u/439680?v=4)](https://github.com/mstralka "mstralka (2 commits)")[![tungtm-unica](https://avatars.githubusercontent.com/u/101539988?v=4)](https://github.com/tungtm-unica "tungtm-unica (2 commits)")[![lucassmacedo](https://avatars.githubusercontent.com/u/3357243?v=4)](https://github.com/lucassmacedo "lucassmacedo (1 commits)")[![dev-mazur](https://avatars.githubusercontent.com/u/80200036?v=4)](https://github.com/dev-mazur "dev-mazur (1 commits)")[![jwpage](https://avatars.githubusercontent.com/u/52687?v=4)](https://github.com/jwpage "jwpage (1 commits)")[![localpath](https://avatars.githubusercontent.com/u/44937070?v=4)](https://github.com/localpath "localpath (1 commits)")[![logan-jobzmall](https://avatars.githubusercontent.com/u/31047862?v=4)](https://github.com/logan-jobzmall "logan-jobzmall (1 commits)")[![aliowacom](https://avatars.githubusercontent.com/u/91871615?v=4)](https://github.com/aliowacom "aliowacom (1 commits)")[![nessimabadi](https://avatars.githubusercontent.com/u/11637110?v=4)](https://github.com/nessimabadi "nessimabadi (1 commits)")[![roberto4for](https://avatars.githubusercontent.com/u/205741732?v=4)](https://github.com/roberto4for "roberto4for (1 commits)")[![tommica](https://avatars.githubusercontent.com/u/1391027?v=4)](https://github.com/tommica "tommica (1 commits)")

---

Tags

laravelrappasoftlaravel-authentication-log

###  Code Quality

TestsPest

Static AnalysisPsalm

Type Coverage Yes

### Embed Badge

![Health badge](/badges/rappasoft-laravel-authentication-log/health.svg)

```
[![Health](https://phpackages.com/badges/rappasoft-laravel-authentication-log/health.svg)](https://phpackages.com/packages/rappasoft-laravel-authentication-log)
```

###  Alternatives

[spatie/laravel-permission

Permission handling for Laravel 12 and up

12.9k89.8M1.0k](/packages/spatie-laravel-permission)[bezhansalleh/filament-shield

Filament support for `spatie/laravel-permission`.

2.8k2.9M88](/packages/bezhansalleh-filament-shield)[jeffgreco13/filament-breezy

A custom package for Filament with login flow, profile and teams support.

1.0k1.7M41](/packages/jeffgreco13-filament-breezy)[spatie/laravel-login-link

Quickly login to your local environment

4381.2M1](/packages/spatie-laravel-login-link)[ryangjchandler/laravel-cloudflare-turnstile

A simple package to help integrate Cloudflare Turnstile.

438896.6k2](/packages/ryangjchandler-laravel-cloudflare-turnstile)[spatie/laravel-passkeys

Use passkeys in your Laravel app

444494.4k16](/packages/spatie-laravel-passkeys)

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)