Harden auth risk controls and admin reauth

db/migrations.py

@@ -69,6 +69,9 @@ def migrate_database(conn, target_version: int) -> None:
     if current_version < 11:
         _migrate_to_v11(conn)
         current_version = 11
+    if current_version < 12:
+        _migrate_to_v12(conn)
+        current_version = 12
 
     if current_version != int(target_version):
         set_current_version(conn, int(target_version))
@@ -472,7 +475,47 @@ def _migrate_to_v11(conn):
         )
         updated = cursor.rowcount
         conn.commit()
+
         if updated:
             print(f"  ✓ 已将 {updated} 个 pending 用户迁移为 approved")
     except sqlite3.OperationalError as e:
         print(f"  ⚠️ v11 迁移跳过: {e}")
+
+
+def _migrate_to_v12(conn):
+    """迁移到版本12 - 登录设备/IP记录表"""
+    cursor = conn.cursor()
+
+    cursor.execute(
+        """
+        CREATE TABLE IF NOT EXISTS login_fingerprints (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            user_agent TEXT NOT NULL,
+            first_seen TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            last_seen TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            last_ip TEXT DEFAULT '',
+            UNIQUE (user_id, user_agent),
+            FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+        )
+        """
+    )
+
+    cursor.execute(
+        """
+        CREATE TABLE IF NOT EXISTS login_ips (
+            id INTEGER PRIMARY KEY AUTOINCREMENT,
+            user_id INTEGER NOT NULL,
+            ip TEXT NOT NULL,
+            first_seen TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            last_seen TIMESTAMP DEFAULT CURRENT_TIMESTAMP,
+            UNIQUE (user_id, ip),
+            FOREIGN KEY (user_id) REFERENCES users (id) ON DELETE CASCADE
+        )
+        """
+    )
+
+    cursor.execute("CREATE INDEX IF NOT EXISTS idx_login_fingerprints_user ON login_fingerprints(user_id)")
+    cursor.execute("CREATE INDEX IF NOT EXISTS idx_login_ips_user ON login_ips(user_id)")
+
+    conn.commit()