app/stories/end-user/EU-007-session-history.md

View Login History

ID: EU-007 Priority: Low Status: Planned

User Story

As an end user, I want to view my login history so that I can detect any unauthorized access to my account.

Acceptance Criteria

• User can view list of recent logins (last 30 days)
• Each entry shows: date/time, IP address, location, device/browser
• Failed login attempts are also shown
• Suspicious logins are highlighted (new location, unusual time)
• User can export login history
• User receives alert for logins from new locations/devices

Technical Notes

• Login events need to be logged with metadata
• Create new LoginHistory collection in MongoDB
• IP geolocation service needed (consider MaxMind or ipinfo.io)
• Privacy considerations: IP retention policy, GDPR compliance
• Could integrate with EU-003 (device management) for unified view

Related TODOs

• New feature - no existing infrastructure