Design a mechanism to detect and respond to suspicious login patterns, such as a login from a new device or an impossible-travel scenario (logins from two distant countries within minutes).
On each successful authentication (leveraging the AuthenticationSuccessEvent listener from Chapter 5), record device fingerprint/IP/geolocation alongside the login. Compare against the user's recent login history: a new, never-seen device or a geolocation that's implausible given the time elapsed since the last login triggers a step-up challenge (re-verify via OTP/email) or a proactive security notification to the user, rather than silently allowing or silently blocking the login outright.
This is a Pro chapter
Sign in, then upgrade to Pro or Power to unlock this and the full Spring Ecosystem Mastery library.
Design a mechanism to detect and respond to suspicious login patterns, such as a login from a new device or an impossible-travel scenario (logins from two distant countries within minutes).