10
Add "Disable user" functionality to the Auth dashboard
Source: supabase/supabase#3377 · opened by @chipilov
Currently, you can easily remove existing users from the Dashboard by going to the users' table under Auth and clicking on "Delete user". It would be nice if you also had a button called "Disable user" similar to Firebase. The expectation for a disabled user is that: - the user will no longer be allowed to login; - Ideally, disabled users will NOT be able to authenticate even if they have a valid access token. I understand that this would require to keep a list of revoked access tokens but if this happens rarely (as expected) and the check is done ONLY if the list of revoked tokens is NOT empty, this should NOT have any effect on perf most of the time; - Even if the access token cannot be revoked as described above, it would still be helpful that the disabled user will no longer be able to login after their access token expires; - RLS rules can use the disabled field to forbid access to any user that is marked as disabled so even if the user still h…
No pledges yet. Be the first to back this.
Comments
Similar requests
Use the dashboard with any postgres role
1 vote · 0 comments
Feature Request: Add Copy & Paste Functionality for Generated Types in Supabase Dashboard
3 votes · 0 comments
Supabase End User Dashboard
1 vote · 0 comments
Better ux on mobile devices on supabase's dashboard
3 votes · 0 comments
Surface user impersonation in SDKs
3 votes · 0 comments
No comments yet.