FusionAuth / fusionauth-issues

FusionAuth issue submission project
https://fusionauth.io
90 stars 12 forks source link

lastUpdateInstant Not always updated on Identities table with user changes #1737

Open jmusyj opened 2 years ago

jmusyj commented 2 years ago

Deactivating a user account does not change lastUpdateInstant

Description

When deactivating a user via the Java clients deactivateUser() method, the lastUpdateInstant isn't being updated to the time we do the deactivation at.

Affects versions

Hosted - v. 1.30.2

Steps to reproduce

Steps to reproduce the behavior:

  1. Call deactivateUser() method for a particular user in the Java client
  2. Retrieve the deactivated user any way (ie. searchUsers())
  3. See lastUpdateInstant is not reflective of the time the deactivation happened

Expected behavior

I would expect the deactivation of a user account to update a User's lastUpdateInstant to the instant the deactivation occurred.

Screenshots

N/A

Platform

(Please complete the following information) Java client v. 1.30.2

Community guidelines

All issues filed in this repository must abide by the FusionAuth community guidelines.

Additional info

Related forum post: https://fusionauth.io/community/forum/topic/2068/locking-a-user-account-does-not-change-lastupdateinstant

mooreds commented 2 years ago

Confirmed this with curl on 1.36.4 as well.

robotdan commented 2 years ago

This is probably working as designed, but it seems reasonable to update this value on a de-activate.

robotdan commented 2 years ago

This may also apply to other use cases such as email verification.