Have Geek Brain

What fields must be included in the database table for user authentication?

I am creating a table for user identification. What fields should be included in this table? How minimal is the ability to track user credentials, track failed login attempts to lock an account, actually lock accounts, etc.

+1


a source to share


2 answers


UserID
password
last login date
create date
password expiration date
Locked
Status



+1


a source


Locking: A simple "IsLocked" and "LockTime" is enough for the user. Every time they try to login, check the lock and if it is within X LockTime, disable it, otherwise set IsLocked false.

The Simples method for tracking login attempts is to have a LoginAptempt and LastLoginAttemptTime account - when they register with setAnailAttempt = 0, otherwise, if they fail at login, increment by 1 and set LastLoginAttemptTime. If they try again, increase and set the time again.



The credentials you store depend on the type of system - most are just username, password and email, but the financial system can use DoB and password reset questions as well.

+1


a source






More articles:


All Articles