Suspicious login detection for FastAPI

from loginllama import LoginLlama, AuthenticationOutcome
from flask import Flask, request

app = Flask(__name__)
loginllama = LoginLlama(api_token=os.environ.get('LOGINLLAMA_API_KEY'))

# Use middleware for automatic IP/User-Agent detection
@app.before_request
def setup_loginllama():
    loginllama.middleware()()

# Pre + Post Auth Pattern
@app.route('/login', methods=['POST'])
def login():
    email = request.form['email']
    password = request.form['password']

    try:
        # Step 1: Pre-auth check
        pre_check = loginllama.check(
            email,
            authentication_outcome='pending'
        )

        if pre_check.risk_score > 7:
            return {'error': 'Login blocked'}, 403

        # Step 2: Authenticate
        auth_result = authenticate(email, password)

        # Step 3: Report outcome
        if auth_result.success:
            loginllama.report_success(auth_result.user.id)
            return {'success': True}
        else:
            loginllama.report_failure(email)
            return {'error': 'Invalid credentials'}, 401
    except Exception as error:
        print(f'LoginLlama error: {error}')
        return {'success': True}  # Fail open on errors