Real-time sign-in approval system with device binding

Task

The project's buyers use accounts on an external platform. Each account receives multiple sign-in requests daily, and every request must be approved before the buyer can proceed. Manual approval does not scale when handling hundreds of accounts, and delays frustrate buyers who expect immediate access.

The system must distinguish between legitimate buyers and unauthorized attempts, approve only the devices that belong to the buyer, and pass unclear cases to a person.

Solution

We built a service in Python that monitors sign-in requests to about 400 accounts in real time through the platform's official API. When a request arrives, the service checks the device against the database of approved devices for that account. If the device is recognized, the service approves the sign-in immediately. If the device is new, the service checks whether the buyer is authorized to add it.

The service uses asyncio to handle concurrent requests without blocking, and PostgreSQL stores the mapping between accounts, buyers, and their approved devices. When the system cannot resolve a request automatically, it sends the details to a Telegram bot.

The operator reviews the case in Telegram and approves or rejects it. The service also runs daily checks to verify that all accounts remain accessible.

• Real-time monitoring of sign-in requests through the platform's official API
• Device binding to ensure only authorized devices are approved
• Asyncio-based concurrency for processing multiple accounts simultaneously
• PostgreSQL database mapping accounts, buyers, and approved devices
• Telegram bot for manual resolution of edge cases
• Daily automated checks to verify account accessibility

Result

• Processes sign-ins on about 400 accounts in real time
• Binds buyers' devices so only their devices are approved
• Routes disputed cases to an operator through a Telegram bot
• Runs daily automatic checks to verify account status