reject logins if account is not validated

SuperAdminTech / api

0 stars 0 forks source link

reject logins if account is not validated #39

Closed santoslluis closed 3 years ago

Nota46 commented 3 years ago

@santoslluis do you mean if user emails is not validated? are there other cases in which account is not validated? Maybe add am enabled field to users is a good idea to disable users for whatever reason manually

Nota46 commented 3 years ago

After speaking with Luis we agreed that users disabled cannot login amd if account is disabled, user can login but the permissions for the disabled company will not appear in the token payload.