API Portal Login Logs

bilgi

The API Portal Login Logs page allows portal administrators to view and analyze all user login attempts, successful and failed logins, IP addresses, and error messages in detail. This page is a critical tool for security monitoring, user activity tracking, and system health analysis.

For per-portal database and external connector settings for login logs, see Login Log Connector Configuration (Portal Settings → Login Log tab).

What are API Portal Login Logs?

API Portal Login Logs, is an audit system that maintains detailed records of all login attempts to the API Developer Portal. Through this system, you can:

• User Login Activity: Track when each user logged in and from which IP address
• Security Monitoring: Detect suspicious activities, failed login attempts, and potential security threats
• System Analysis: Analyze portal usage statistics, login trends, and system health
• Compliance: Store and report log records for legal requirements

Importance of Login Logs

Security Monitoring

Detect brute force attacks, suspicious IP addresses, and unauthorized access attempts

User Tracking

Monitor user activities, identify most active users, and analyze usage patterns

Troubleshooting

Understand why users cannot log in and quickly provide solutions

Compliance and Audit

Maintain detailed log records to meet legal requirements

Accessing the Page

To access the API Portal Login Logs page, follow these steps:

Login to Manager Interface

Log in to Apinizer Manager interface with administrator privileges

Go to Portal Tab

Click on Portal tab in the top menu bar

Go to API Portal Settings

Click on the relevant portal from the portal list or go to Portal → Settings menu

Access Login Logs Page

Click on "Login Logs" or "Giriş Kayıtları" option from the left menu or settings page

• Alternatively, you can follow the path: Portal → Accounts/Developers → Login Logs

API Portal Login Logs Screen

What Can You Do with Login Logs?

Login Tracking

Track when users logged in and from which IP addresses. Analyze login times, frequency, and geographic distribution.

Success Analysis

View whether logins were successful or failed. Calculate success rates and track trends.

Error Review

Review error messages in failed logins in detail. Understand why users cannot log in and resolve issues.

Advanced Filtering

Search and filter by specific user, IP address, or date range to perform detailed analysis.

Security Monitoring

Detect suspicious activities, brute force attacks, and unauthorized access attempts.

User Activity Reporting

Create and share user activity reports for specific periods.

Filtering and Search Features

The Login Logs page offers various options to filter and search records. These features allow you to quickly access the information you need from thousands of records.

1. Setting Login Date and Time Range

You can set a date range to filter user login or transaction activities within a specific period. This feature is very useful for analyzing activities in a specific period.

Date Range Filtering Features:

Feature	Description
Start Date (From)	Select the start date for filtering. Records before this date are not shown.
End Date (To)	Select the end date for filtering. Records after this date are not shown.
Date Format	Date format: YYYY-MM-DD (Example: 2025-01-15)
Time Support	Time information can also be selected in the date picker (optional)

Select Start Date

Enter the start date you want to filter in the From (Start Date) field or select it from the date picker.

Example: 2025-01-01 - Shows records from January 1, 2025 onwards

Select End Date

Enter the end date you want to filter in the To (End Date) field or select it from the date picker.

Example: 2025-01-31 - Shows records up to January 31, 2025

Apply Filtering

After selecting the date range, the system automatically applies the filter or click the "Apply" / "Filter" button.

View Results

Only records within the specified date range will be displayed in the table. Records outside the date range are hidden.

ipucu

Performance Tip: When selecting date range, a maximum 90-day period is recommended for performance. Pagination is used for longer periods.

bilgi

When no date range is selected, the system displays the last 30 days of records by default. This optimizes page load performance.

2. Search by Email Address

You can search by email to examine a specific user's activities. This feature is very useful for seeing a user's complete login history.

email(string)

You can search by entering the user's email address in the Search by email field. With this filtering, only records belonging to the relevant user will be listed.

Email Search Features:

Feature	Description
Exact Match	You must enter the complete email address (partial search is not supported)
Case Insensitive	Email address is not case sensitive
Automatic Filtering	Filtering is automatically applied when email is entered

Example Usage Scenarios:

User Login History Check

To check a user's last login time and successful/failed login attempts:

• Email: john.doe@example.com
• Date Range: Last 30 days
• Result: All login attempts for the user are listed

Account Lockout Issue Investigation

To understand why a user's account was locked:

• Email: user@example.com
• Status: FAILURE
• Result: Failed login attempts and error messages are displayed

Example Email Addresses:

• john.doe@example.com
• developer@company.com
• test.user@apinizer.com

3. Search by IP Address

You can use IP-based search to filter by the IP address from which login was made. This feature is critical for security analysis and suspicious activity detection.

ipAddress(string)

Enter the relevant IP address in the Search by IP address field. This displays activities from a specific IP.

IP Address Search Features:

Feature	Description
IP Format	IP address in IPv4 format (Example: 192.168.1.100)
Exact Match	You must enter the complete IP address
Multiple Results	All login attempts from the same IP are listed

uyarı

Security Warning: A large number of failed login attempts from the same IP address in a short time may be a sign of a potential brute force attack. In this case:

• Block the IP address
• Inform the user
• Notify the security team
• Add additional security layers

IP Address Analysis Scenarios:

Suspicious IP Detection

To examine all login attempts from a specific IP address:

• IP Address: 192.168.1.100
• Date Range: Last 7 days
• Result: All login attempts from this IP are listed

bilgi

If there are many failed attempts from this IP, security measures should be taken.

Geographic Distribution Analysis

To analyze access from different IP addresses:

• Search each IP address separately
• Compare successful and failed login rates
• Detect suspicious locations

Example IP Addresses:

• 192.168.1.100 (Local network)
• 10.0.0.50 (Private network)
• 203.0.113.45 (Public IP)

Table Columns and Information

The Login Logs table displays the following information. Each column provides different information about the login attempt.

Table Structure

Column	Description	Format	Example
Status	Result of the operation (Success/Failed)	Badge	SUCCESS, FAILURE
Email	Email address of the user attempting to log in	String	user@example.com
Account Name	User's account name	String	John Doe
Date	Date and time when the operation occurred	DateTime	2025-01-15 14:30:25
IP Address	IP address where the operation was performed	String	192.168.1.100
Message	Error message or operation details	String	Authentication failed -> DISABLED

Status

The Status column in the table indicates the result of the operation. This column shows whether the login attempt was successful or failed.

SUCCESS(badge)

Successful: The operation was completed successfully. The user entered the correct email and password and logged into the portal.

When It Appears:

• When user logs in with correct email and password
• When account is active and approved
• When email verification is completed

Message: When Status is SUCCESS, the Message column is usually empty.

FAILURE(badge)

Failed: The operation failed. Failed login attempts, authorization errors, or other operation errors appear in this status.

When It Appears:

• When wrong password is entered
• When account is disabled
• When email verification is not done
• While waiting for admin approval
• When account is rejected

Message: When Status is FAILURE, a detailed error message is displayed in the Message column.

Message

Error or warning messages related to failed operations are located in this column. These messages explain why the user could not log in.

Message Column Features:

Status	Message Content	Description
SUCCESS	(Empty)	Messages are usually empty for successful logins
FAILURE	Error message	Detailed error message is shown for failed logins

bilgi

Error messages in the Message column are very important for troubleshooting and user support. By carefully examining these messages, you can quickly resolve user issues.

Email

email(string)

Email: The email address of the user on whom the operation was performed. This is the email address the user uses to log into the portal.

Email Column Features:

• Email address is displayed in full
• You can filter all records for that user by clicking on this column
• Email address is used to identify the user

Account Name

accountName(string)

Account Name: The user's account name or display name. This is the name defined in the user's profile.

Account Name Column Features:

• User's full name or display name is shown
• Unlike email address, it provides a more readable identity
• May be empty in some cases (if user name is not defined)

Date

date(datetime)

Date: The date and time when the operation occurred. This shows the exact time of the login attempt.

Format: YYYY-MM-DD HH:mm:ss

Example: 2025-01-15 14:30:25

Date Column Features:

• Date and time information is displayed in full
• Time information shows the exact time of the login attempt
• Records are listed in date order (newest at top)

IP Address

ipAddress(string)

IP Address: The IP address where the operation was performed. This is the IP address of the device or network from which the user logged in.

Format: XXX.XXX.XXX.XXX (IPv4)

Example: 192.168.1.100

IP Address Column Features:

• IP address is shown in IPv4 format
• You can filter all login attempts from that IP by clicking on this column
• Critical information for security analysis

API Portal Login Error Messages

Users attempting to log into the API Portal may fail for various reasons. Below, all possible error conditions and their meanings are explained in detail.

1. Waiting for Admin Approval (WAITING_FOR_APPROVEMENT)

When It Appears:

• User has registered on the portal
• Has verified email address
• But admin has not yet approved the account
• Portal Settings → Security → "Auto Approve Account" = PASSIVE

Error Message:

Authentication failed -> WAITING_FOR_APPROVEMENT

Message Shown to User: "Your account is waiting for administrator approval. You will be able to log in after approval."

Solution:

• Portal administrator should approve the user from Portal Management → Developer Accounts section
• Or activate the "Auto Approve Account" feature in Portal Settings → Security

bilgi

This is part of the manual approval process. Users cannot log into the portal while waiting for admin approval.

2. Email Verification Not Done (CONFIRMATION_NEEDED)

When It Appears:

• User has registered on the portal
• But has not clicked the link in the email to verify email address
• If email verification is required

Error Message:

Authentication failed -> CONFIRMATION_NEEDED

Message Shown to User: "Please verify your email address. You can verify your email address by clicking the link in the registration email."

Solution:

• User should click the verification link in the email received during registration
• If email did not arrive, can use "Resend Email" feature

uyarı

Users cannot log into the portal without email verification. This is an important step for security.

3. Account Disabled (DISABLED)

When It Appears:

• Account is automatically locked when user enters wrong password 5 times
• Or manually disabled by admin
• When security violation is detected

Error Message:

Authentication failed -> DISABLED

Message Shown to User: "Your account has been disabled. Please contact the administrator."

Solution:

• Portal administrator can reactivate the account from Portal Management → Developer Accounts section
• User can request account activation by contacting the administrator

uyarı

5 Wrong Passwords = Automatic Lockout: User accounts are automatically set to DISABLED status when users enter wrong password 5 times. This is a security measure against brute force attacks.

4. Application Rejected (REJECTED)

When It Appears:

• User's registration application has been rejected by admin
• Admin has rejected the user from Portal Management → Developer Accounts section

Error Message:

Authentication failed -> REJECTED

Message Shown to User: "Your account application has been rejected. Please contact the administrator for detailed information."

Solution:

• User can make a new application
• Or contact the administrator to get information about the rejection reason

bilgi

Rejected accounts remain in the system but cannot log into the portal. Administrator can approve the account again if necessary.

5. Account Not Approved (NOT_APPROVED)

When It Appears:

• Account has not passed the approval process
• Email verification is done but admin approval is pending
• Or auto approval feature is passive and admin has not yet approved

Error Message:

Authentication failed -> NOT_APPROVED

Message Shown to User: "Your account has not yet been approved. Please wait for the approval process to complete."

Solution:

• Portal administrator should approve the account
• Or activate the "Auto Approve Account" feature in Portal Settings → Security

6. Wrong Password

When It Appears:

• When user enters wrong password
• Email address is correct but password is wrong

Error Message:

Account user@apinizer.com failed authentication due to 1 failed login attempts

Message Shown to User: "Email or password is incorrect. Remaining attempts: X" (X = 5, 4, 3, 2, 1)

⚠️ Important Security Mechanism:

• 1st Wrong Attempt: ... failed authentication due to 1 failed login attempts
  • Remaining attempts: 4
• 2nd Wrong Attempt: ... failed authentication due to 2 failed login attempts
  • Remaining attempts: 3
• 3rd Wrong Attempt: ... failed authentication due to 3 failed login attempts
  • Remaining attempts: 2
• 4th Wrong Attempt: ... failed authentication due to 4 failed login attempts
  • Remaining attempts: 1
• 5th Wrong Attempt: ... failed authentication due to 5 failed login attempts
  • Account automatically goes to DISABLED status
• 6th Attempt: Cannot log in anymore, account is locked

Solution:

• User should enter the correct password
• If forgot password, can use "Forgot Password" feature
• If account is locked, should contact administrator

uyarı

Automatic Account Lockout: Account is automatically locked after 5 wrong password attempts. This is a critical security measure.

7. User Not Found (Account Not Found)

When It Appears:

• Entered email address is not registered in the system
• User has not yet registered on the portal
• Email address was entered incorrectly

Error Message:

Authentication failed -> Account not found

Message Shown to User: "No user registered with this email address was found. Please check your email address or register."

Solution:

• User should check the email address
• If not registered, should register by clicking "Register" button
• If entered email incorrectly, should enter the correct email address

✅ 8. Successful Login (Success)

When It Appears:

• When email and password are correct
• When account is active and approved
• When email verification is completed
• When admin approval is given (if required)

Error Message: None (message is empty)

Status: SUCCESS

Shown to User: User is redirected to the portal home page and has successfully logged into the portal.

bilgi

Successful logins are displayed with SUCCESS status in Login Logs. These records are important for user activity tracking.

📋 Error Messages Summary Table

The following table summarizes all error conditions and solutions:

Status	When	Error Message	Shown to User	Solution
WAITING_FOR_APPROVEMENT	Waiting for admin approval	Authentication failed -> WAITING_FOR_APPROVEMENT	"Your account is waiting for administrator approval"	Admin should approve account
CONFIRMATION_NEEDED	Email not verified	Authentication failed -> CONFIRMATION_NEEDED	"Please verify your email address"	Click email verification link
DISABLED	5 wrong attempts or manual	Authentication failed -> DISABLED	"Your account is disabled"	Admin should activate account
REJECTED	Application rejected	Authentication failed -> REJECTED	"Your account application has been rejected"	New application can be made
NOT_APPROVED	Not approved	Authentication failed -> NOT_APPROVED	"Your account has not yet been approved"	Admin should approve account
Wrong Password	Password wrong	Account user@... failed authentication due to N failed login attempts	"Email or password is incorrect. Remaining: X"	Enter correct password
Account Not Found	Email not found	Authentication failed -> Account not found	"No user found with this email"	Register or check email
Successful	Email+password correct	(empty)	Redirect to home page	-

Usage Scenarios and Examples

You can perform analysis and troubleshooting in various scenarios using the Login Logs page. Below, the most common usage scenarios are explained in detail.

Scenario 1: User Activity Check

To check a user's login activities and learn their last login time:

Select Date Range

Select date range to check a specific user's login activities:

• From: 2025-01-01 (Start date)
• To: 2025-01-31 (End date)

bilgi

You can use the default date range to see last 30 days of activity.

Filter User

Enter the user's email address in the Search by email field:

• Example: john.doe@example.com

The system automatically filters all records for this user.

Review Results

You can see the following information in the table:

• Last Login Time: Date and time of the last successful login
• Login Frequency: How often the user logs in
• Success/Failure Rate: Percentage of successful ones in total login attempts
• IP Addresses: Which IP addresses the user logged in from

ipucu

You can easily distinguish successful (SUCCESS) and failed (FAILURE) logins from the Status column.

Detailed Analysis

Analyze the user's activity pattern:

• Which hours are more active?
• Which IP addresses are they logging in from?
• Are there failed login attempts?
• When was the last login?

Scenario 2: Failed Login Analysis and Troubleshooting

To analyze failed login attempts and resolve user issues:

Apply Status Filter

To see only failed logins in the table:

• Look at the Status column and examine records with FAILURE status
• Or narrow down failed logins with date range and email filter

bilgi

Failed logins are marked with a red FAILURE badge.

Review Error Messages

Analyze failure reasons from the Message column:

Common Error Types:

• WAITING_FOR_APPROVEMENT → Waiting for admin approval
• CONFIRMATION_NEEDED → Email not verified
• DISABLED → Account locked
• Wrong Password → Wrong password

uyarı

Immediate intervention may be required for accounts in DISABLED status.

Provide User Support

Apply appropriate solution according to error type:

Waiting for Admin Approval:

• Go to Portal Management → Developer Accounts section
• Find the user and click [Approve] button

Email Not Verified:

• Tell user to resend email verification link
• Or you can skip email verification as admin

Account Locked:

• Go to Portal Management → Developer Accounts section
• Find the user and activate the account
• You can send password reset link to the user

Wrong Password:

• Recommend user to use "Forgot Password" feature
• Or perform password reset as admin

Trend Analysis

Analyze failed login trends:

• Are there continuous failed attempts for a specific user?
• Are there many failed attempts from a specific IP address?
• Did the number of failed attempts increase in a specific time period?

ipucu

This analysis helps you detect security threats and system issues early.

Scenario 3: Security Violation Detection and Prevention

To detect suspicious activities and take security measures:

IP-Based Search

View all logins from a suspicious IP address:

• Enter IP address in the Search by IP address field
• Example: 192.168.1.100

The system lists all login attempts from this IP.

Check Failed Attempt Count

Check if there are many failed login attempts from the same IP:

Suspicious Activity Indicators:

• 10+ failed attempts in a short time (e.g., within 1 hour)
• Attempts made with different email addresses
• Systematically increasing attempt count

uyarı

Brute Force Attack Indicator: A large number of failed login attempts from the same IP in a short time may be a sign of a potential brute force attack. In this case, immediate security measures should be taken.

Take Security Measures

When suspicious activity is detected:

1. Block IP Address:

• Block IP address from firewall or security settings
• Or apply IP restriction at API Gateway level

2. Protect User Accounts:

• Check affected user accounts
• If necessary, make password change mandatory

3. Notify Security Team:

• Inform security team about suspicious activity
• Share log records with security team

4. Additional Security Layers:

• Add CAPTCHA
• Apply rate limiting
• Make two-factor authentication (2FA) mandatory

Reporting and Documentation

Document security incidents:

• Record suspicious IP addresses
• Note incident time and details
• Document measures taken
• Create regular security reports

Scenario 4: System Health and Performance Analysis

To analyze portal login statistics and evaluate system health:

View General Statistics

Analyze general statistics for a specific period:

• Total Login Attempts: Total number of login attempts made
• Successful Login Rate: Percentage of successful logins
• Failed Login Rate: Percentage of failed logins
• Most Active Users: Users who log in most frequently

Trend Analysis

Analyze trends over time:

• Daily/weekly/monthly login counts
• Changes in success rate
• Peak hours (busiest login hours)
• Seasonal or periodic changes

Performance Metrics

Evaluate system performance:

• Average login success rate
• Most common error types
• User satisfaction indicators

Best Practices and Recommendations

Follow these recommendations to use the Login Logs page effectively:

Regular Review

Review Login Logs regularly (daily or weekly). Detect suspicious activities early.

Automatic Alerts

Set up automatic alerts for critical security events (e.g., 10+ failed attempts).

Log Retention

Retain logs for sufficient period for compliance requirements (e.g., 90 days, 1 year).

Reporting

Create and share regular security and usage reports.

User Education

Inform users about secure password usage and login security.

Security Policies

Create and implement security policies (e.g., password complexity, 2FA).

Important Reminders

uyarı

5 Wrong Passwords = Automatic Lockout

User accounts are automatically set to DISABLED status when users enter wrong password 5 times. This is a critical security measure against brute force attacks.

Administrator Action:

• Regularly check locked accounts
• Inform users about account lockout
• Activate account if necessary

bilgi

Log Retention Policy

Retain logs for sufficient period and check regularly for compliance requirements. Different retention periods may be required for different industries:

• General: 90 days
• Finance: 1 year or longer
• Healthcare: According to legal requirements
• Public: According to legal requirements

ipucu

Regular Reporting

Create regular reports to track security and usage trends:

• Daily: Critical security events
• Weekly: General activity summary
• Monthly: Detailed analysis and trend report
• Yearly: Annual security and usage report

Conclusion

The API Portal Login Logs page is a powerful tool for monitoring portal security, tracking user activities, and analyzing system health. By using this page regularly, you can:

✅ Detect security threats early
✅ Quickly resolve user issues
✅ Optimize system performance
✅ Meet compliance requirements
✅ Perform detailed analysis and reporting

User Tracking

Track all user login attempts in detail and analyze most active users

Security Monitoring

Quickly detect suspicious activities and security violations, monitor failed login trends

System Analysis

Report portal login statistics, performance metrics, and system health

Compliance

Store log records and create regular reports to meet legal requirements

Geographic Distribution

Analyze access from different IP addresses and location-based activities

Automatic Protection

Ensure security with automatic account lockout after 5 wrong passwords