SolarArbiter / solarforecastarbiter-api

HTTP API and database schema for the Solar Forecast Arbiter
https://api.solarforecastarbiter.org
MIT License
10 stars 6 forks source link

add ability to lock/unlock user accounts #116

Open alorenzo175 opened 5 years ago

alorenzo175 commented 5 years ago

and make rbac functions take this into account before allowing access

alorenzo175 commented 5 years ago

Auth0 also has the ability to prevent logins. Could rely on that, but there would be a delay from when the lock is applied and when the user's token expires. Otherwise we should probably still use the Auth0 lock and add a column to the users table that is checked before any can_user_perform_action