I need to be able to "turn off" loginability for e...
# support-questions-legacyr
Roy R
09/09/2022, 9:05 PMI need to be able to "turn off" loginability for existing users. I wasn't able to find any initial reference in my "emailpassword" recipe to doing this. Do I have to "delete" a credential and lose their password to be able to turn off loginability for certain users?
p
porcellus
09/09/2022, 9:05 PMhi
porcellus
09/09/2022, 9:05 PMthis should be doable by overriding the sign-in API
porcellus
09/09/2022, 9:06 PMwhich recipe are you using?
r
Roy R
09/09/2022, 9:07 PMThis one:
Roy R
09/09/2022, 9:07 PMp
porcellus
09/09/2022, 9:07 PMthen this should cover it I think: https://supertokens.com/docs/emailpassword/advanced-customizations/apis-override/custom-response/general-error
porcellus
09/09/2022, 9:08 PMthis is about denying sign ups, but you can do the same thing for sign in the same way
r
Roy R
09/09/2022, 9:12 PMOk, hmmm
Roy R
09/09/2022, 9:12 PMSo you're saying that I would...
Roy R
09/09/2022, 9:12 PMoverrride the signup api function...
Roy R
09/09/2022, 9:13 PM...check if the email corresponds to a user.
Roy R
09/09/2022, 9:13 PMthen check if that user is disabled.
Roy R
09/09/2022, 9:13 PMAnd if disabled, respond with error instead of success.
p
porcellus
09/09/2022, 9:15 PMthe sign in api, but yup
porcellus
09/09/2022, 9:16 PMalso, you could do it based on the userid
porcellus
09/09/2022, 9:17 PMor something stored in the user metadata (https://supertokens.com/docs/emailpassword/common-customizations/usermetadata/about)