Users should have an "authenticated_ips" column (array of strings) to denote all the ips that they have been successfully authenticated on // OR: General geolocation instead
When a user creates their account the IP/Geolocation they create the account on will be the first in this array.
When a user tries to sign in with an IP not in this list or geolocation x distance away they will receive a verification code telling them they logged in from a new location.
Once they verify the new IP/Location will be appended to their list in the database
Users should have an "authenticated_ips" column (array of strings) to denote all the ips that they have been successfully authenticated on // OR: General geolocation instead
When a user creates their account the IP/Geolocation they create the account on will be the first in this array.
When a user tries to sign in with an IP not in this list or geolocation x distance away they will receive a verification code telling them they logged in from a new location.
Once they verify the new IP/Location will be appended to their list in the database