ory / kratos

Next-gen identity server replacing your Auth0, Okta, Firebase with hardened security and PassKeys, SMS, OIDC, Social Sign In, MFA, FIDO, TOTP and OTP, WebAuthn, passwordless and much more. Golang, headless, API-first. Available as a worry-free SaaS with the fairest pricing on the market!
https://www.ory.sh/kratos/?utm_source=github&utm_medium=banner&utm_campaign=kratos
Apache License 2.0
10.81k stars 935 forks source link

feat: add an admin API to lock/unlock an account #3941

Open drev74 opened 1 month ago

drev74 commented 1 month ago

Preflight checklist

Ory Network Project

No response

Describe your problem

I need to programmatically lock/unlock a user account. This is a normal practice in multiuser system. Then admin or support unlocks the account after user request

Describe your ideal solution

  1. Add a a boolean field locked into table identities
  2. Add two admin methods to lock/unlock the identity by setting/clearing this field

Workarounds or alternatives

I see another field called active. It is used to describe a state and prevent login before confirming email. This could be used to add a state = locked, but I still prefer to add a new boolean field locked.

Version

master

Additional Context

No response