06/04 Optimize app

routes/auth.py

@@ -35,7 +35,7 @@ def login():
             error = f"Account locked. Try again in {mins}m {secs}s."
             logger.warning(f"Login blocked for '{username}' — still locked ({seconds_remaining}s remaining).")
         else:
-            user = authenticate(username, password)
+            user = authenticate(username, password, ip_address=ip)
             if user:
                 session.clear()          # prevent session fixation
                 session.permanent = True

routes/user_dashboard.py

@@ -9,7 +9,7 @@ from flask import Blueprint, render_template, request, redirect, url_for, flash,
 from models import (
     get_today_checks, mark_website_checked, unmark_website_checked,
     update_check_note, get_user_active_shifts, get_website_credentials,
-    get_website_url,
+    get_website_url, log_action,
 )
 from utils.decorators import login_required
 
@@ -86,6 +86,9 @@ def view_credentials(website_id):
     """JSON endpoint: return decrypted credentials for a site."""
     try:
         creds = get_website_credentials(website_id)
+        user_id = session["user"]["id"]
+        log_action(user_id, "VIEW_CREDENTIALS", "websites", website_id,
+                   f"User viewed credentials for website {website_id}.")
         return jsonify([{
             "label":    c.get("label", ""),
             "username": c.get("username", ""),