Start recording last_used_at on SessionToken

Author: lnagel

rest_framework_sso/migrations/0002_sessiontoken_last_used_at.py

@@ -0,0 +1,18 @@
+# Generated by Django 2.1.11 on 2019-08-14 07:17
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('rest_framework_sso', '0001_initial'),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name='sessiontoken',
+            name='last_used_at',
+            field=models.DateTimeField(blank=True, db_index=True, null=True),
+        ),
+    ]

rest_framework_sso/models.py

@@ -32,6 +32,7 @@ class SessionToken(models.Model):
     user = models.ForeignKey(to=AUTH_USER_MODEL, related_name="+", on_delete=models.CASCADE, verbose_name=_("user"))
     ip_address = models.GenericIPAddressField(null=True, blank=True, db_index=True)
     user_agent = models.CharField(max_length=1000, blank=True)
+    last_used_at = models.DateTimeField(null=True, blank=True, db_index=True)
     created_at = models.DateTimeField(auto_now_add=True, db_index=True)
     revoked_at = models.DateTimeField(null=True, blank=True, db_index=True)
 

rest_framework_sso/utils.py

@@ -6,7 +6,7 @@
 import jwt
 from django.contrib.auth import get_user_model
 from django.core.serializers.json import DjangoJSONEncoder
-from django.utils import six
+from django.utils import six, timezone
 from django.utils.translation import gettext_lazy as _
 from jwt.exceptions import MissingRequiredClaimError, InvalidIssuerError, InvalidTokenError
 from rest_framework import exceptions
@@ -147,7 +147,8 @@ def authenticate_payload(payload, request=None):
             )
             if request is not None:
                 session_token.update_attributes(request=request)
-                session_token.save()
+            session_token.last_used_at = timezone.now()
+            session_token.save()
             user = session_token.user
         except SessionToken.DoesNotExist:
             raise exceptions.AuthenticationFailed(_("Invalid token."))