Is blocking/banning an user something that might b...
# security-discussionn
n1ru4l
10/17/2022, 9:35 AMIs blocking/banning an user something that might be added to the SuperTokens core? I know we could implement it ourselves today by extending the functionality. Some security certificates seem to require this.
r
rp_st
10/17/2022, 10:04 AMhey @n1ru4l could you open an issue about this on our github? We will add it to our roadmap.
Which security certs require this btw?
n
n1ru4l
10/17/2022, 10:11 AM> Question "IAM - 12.11" in https://cloudsecurityalliance.org/artifacts/consensus-assessments-initiative-questionnaire-v3-1/
This is required by one of our customers
r
rp_st
10/17/2022, 10:12 AMok thanks! Please open an issue about it. We will implement it soon enough
rp_st
10/17/2022, 10:12 AMuntil then, as you said, you can override the sign in and session refresh API to implement this
n
n1ru4l
10/17/2022, 10:12 AMyes on it right now 🙂
r
rp_st
10/17/2022, 10:12 AMand you can store info about if a user is blocked or not in the user metadata recipe. So it makes it easier for you
n
n1ru4l
10/17/2022, 10:14 AMr
rp_st
10/17/2022, 10:17 AMthanks
4 Views