Download the PHP package gopal-gautam/failed-login-logger without Composer
On this page you can find all versions of the php package gopal-gautam/failed-login-logger. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download gopal-gautam/failed-login-logger
More information about gopal-gautam/failed-login-logger
Files in gopal-gautam/failed-login-logger
Package failed-login-logger
Short Description A Laravel package that listens for failed authentication events and persists them to your database for auditing, brute-force detection and incident response.
License MIT
Homepage https://github.com/gopal-gautam/failed-login-logger
FAQ
Example:
In general, it is recommended to use always a project to download your libraries. In an application normally there is more than one library needed.
- Some hosting areas are not accessible by a terminal or SSH. Then it is not possible to use Composer.
- To use Composer is sometimes complicated. Especially for beginners.
- Composer needs much resources. Sometimes they are not available on a simple webspace.
- If you are using private repositories you don't need to share your credentials. You can set up everything on our site and then you provide a simple download link to your team member.
- Simplify your Composer build process. Use our own command line tool to download the vendor folder as binary. This makes your build process faster and you don't need to expose your credentials for private repositories.
Informations about the package failed-login-logger
Failed Login Logger for Laravel
Persist every failed authentication attempt in your Laravel application to the
database for auditing, brute-force detection and incident response. The package
listens to Laravel's built-in Illuminate\Auth\Events\Failed event so it works
with the standard web guard, custom guards, Sanctum, Fortify, Jetstream,
Breeze and any code path that goes through Laravel's authentication
infrastructure.
Features
- Listens to
Illuminate\Auth\Events\Failedautomatically — no controller changes needed. - Captures the supplied identifier (email, username, …), IP address, user
agent, guard name and the matching
user_idwhen the user exists. - Configurable: change the table name, the model, the captured fields, the credential keys to inspect, and queue settings without forking the package.
- Optional asynchronous logging via Laravel queues.
- Built-in
MassPrunableintegration with a configurable retention window. - Listener swallows synchronous failures (and reports them via
report()) so a misconfigured logger can never break the login flow. - Compatible with Laravel 9 – 12 and PHP 8.0+.
Installation
The service provider is auto-discovered, so no manual registration is needed.
Publish the migration and run it
Publish the config (optional)
This drops config/failed-login-logger.php into your application where every
option is documented inline.
Usage
Once installed and migrated the package starts recording failed logins automatically. Inspect them with the Eloquent model:
Throttling / brute-force detection example
Configuration
Every option is in config/failed-login-logger.php after publishing:
| Key | Default | Description |
|---|---|---|
enabled |
true |
Master switch. Set to false to skip recording without uninstalling. |
table |
failed_login_attempts |
Database table name. |
model |
FailedLoginAttempt::class |
Eloquent model. Replace with your own subclass to add behaviour. |
capture.ip |
true |
Whether to record the client IP address. |
capture.user_agent |
true |
Whether to record the request User-Agent. |
capture.guard |
true |
Whether to record the auth guard that emitted the event. |
identifier_keys |
['email', 'username', 'name'] |
Ordered list of credential keys searched for the identifier. |
queue.enabled |
false |
Run the listener on a queue instead of synchronously. |
queue.connection / queue.queue |
null / null |
Override the connection / queue name when queuing. |
pruning.enabled |
false |
Allow model:prune to delete old rows. |
pruning.retention_days |
30 |
How long to keep records when pruning is enabled. |
Each option can also be controlled via environment variables — see the
env(...) calls in the published config file.
Asynchronous logging
To move the database write off the request lifecycle:
When queue.enabled is true the listener dispatches the database write as a
queued closure with afterResponse(), so the response is sent first and the
write happens on a worker (or after the request completes when the queue is
sync). The listener itself is not ShouldQueue — Laravel 12's
dispatcher silently drops ShouldQueue listeners whose shouldQueue()
returns false, so we dispatch a separate job from a regular listener instead.
This works across Laravel 9–12.
Pruning old records
The model uses Laravel's MassPrunable trait. After enabling pruning in the
config, schedule the prune command (e.g. in routes/console.php on Laravel 11+):
Replacing the model
Schema
The published migration creates a table with the following columns:
| Column | Type | Notes |
|---|---|---|
id |
bigIncrements |
Primary key. |
user_id |
unsignedBigInteger, nullable |
Indexed. Set when identifier matches a user. |
email_address |
string, nullable |
Indexed. The identifier supplied at login. |
ip_address |
string(45), nullable |
Indexed. IPv4 or IPv6. |
user_agent |
string(1024), nullable |
Truncated to 1024 chars. |
guard |
string(64), nullable |
Auth guard that emitted the event. |
created_at |
timestamp |
Indexed for time-window queries. |
updated_at |
timestamp |
No foreign key is added to users so the table can coexist with non-standard
user schemas. Add one in your own migration if you need cascade behaviour.
Behind a proxy / load balancer
request()->ip() returns the address of the immediate client. If your
application sits behind a reverse proxy or load balancer, configure Laravel's
TrustProxies middleware so that the X-Forwarded-For header is honoured.
The package will then automatically capture the real client IP.
Testing
The suite uses Orchestra Testbench against an in-memory SQLite database.
Changelog
See CHANGELOG.md for release notes.
License
Released under the MIT License.
All versions of failed-login-logger with dependencies
illuminate/auth Version ^9.0|^10.0|^11.0|^12.0
illuminate/database Version ^9.0|^10.0|^11.0|^12.0
illuminate/events Version ^9.0|^10.0|^11.0|^12.0
illuminate/support Version ^9.0|^10.0|^11.0|^12.0