CKAN does not capture user login event any more

[FuhuXia]

We made an effort to capture user login and logout events.

• Ensure login/logout events are captured #2867

But after CKAN2.10 deployment, login event is not captured any more, as shown in the catalog-admin NewRelic log. Same for Inventory.

How to reproduce

Log in to catalog and search for "logged in successfully" in catalog-admin NewRelic log.

Expected behavior

See the entry.

Actual behavior

No entry.

Sketch

[Notes or a checklist reflecting our understanding of the selected approach]

[nickumia-reisys]

Code to put api token logging: load_user_from_request

Important functions:

• get_user_from_token
• _get_user_for_apitoken

---

CORRECTION!

API Token is being logged: log.debug(u'Received API Token: %s' % apitoken). However, this requires debug at the ckan level, which is currently set to info for catalog and inventory. While it's not the most effective solution. To get the specific user directly, we'd need to submit a PR upstream to log the user (instead? or as well?). We could add a log.info(u'User used API Token: %s' % user)... but it requires team discussion.

[FuhuXia]

Or extend identify() in IAuthenticator in ckanext-saml2auth or a new ckanext-datagovcommon with the following code:

def identify(self):
    if current_user.is_authenticated and current_user.is_active and not session.get('last_active'):
        log.info('User {} logged in{}'.format(
            current_user.name, 
            ' via saml' if session.get('_saml_session_info') else ''
        ))

[Jin-Sun-tts]

The UI login were fixed to have the log.info in the 2.10 condition in the saml2auth.py file. While working on the solution to capture API login too, added identity in the plugin.py file to extend in IAuthenticator. So we do not need the login info in the saml2auth location anymore as the identify function log both situation. here are the test result from local:

From UI login:

From curl call:

[Jin-Sun-tts]

We have the change in gsa/ckanext-saml2auth create_user_via_saml.log_210 branch. Requested PR to upstream keitaroinc/ckanext-saml2auth#92