Hi everyone!
Do you know if there is a feature of user approval by admins if a user signs up to my app?
If not, how would you handle it? I have some ideas but innovative ideas are welcome!
r
rp_st
04/11/2024, 4:13 PM
hey @wendytrns this is a modification you have to make on your end. You can do this for example by denying access to users who have signed in / up by adding a custom claim in the access token paylaod.
w
wendytrns
04/11/2024, 4:17 PM
Great thanks.
So what you say is that I add a claim that says that the user is approved if he is indeed approved. And I verify it at request time.
And where would I save the approval info? Saving this in the user metadata is a good practice ?
r
rp_st
04/11/2024, 4:17 PM
yea, in your db, or in the user metadata feature we have. Either is fine
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).