FeatureFuel
10

Add "Disable user" functionality to the Auth dashboard

Source: supabase/supabase#3377 · opened by @chipilov
Currently, you can easily remove existing users from the Dashboard by going to the users' table under Auth and clicking on "Delete user". It would be nice if you also had a button called "Disable user" similar to Firebase. The expectation for a disabled user is that: - the user will no longer be allowed to login; - Ideally, disabled users will NOT be able to authenticate even if they have a valid access token. I understand that this would require to keep a list of revoked access tokens but if this happens rarely (as expected) and the check is done ONLY if the list of revoked tokens is NOT empty, this should NOT have any effect on perf most of the time; - Even if the access token cannot be revoked as described above, it would still be helpful that the disabled user will no longer be able to login after their access token expires; - RLS rules can use the disabled field to forbid access to any user that is marked as disabled so even if the user still h…

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests