Reuse or Deactivate delete /users/{user_id} and how to protect resources

[migeruj]

Hi guys I am experimenting with fastapi-users. But I have some questions about the user's endpoint.

1. In my case I need to not be able to delete users, just update the is_active field instead of delete record.
2. How can I protect the endpoints after they are logged in? I don't see clear documentation on this second point

I think that's all!

Thanks in advance.

[frankie567]

1. There is currently no easy way to remove the DELETE endpoint. Since it's only allowed for superusers, maybe you can keep it and just not use it. If you really want to remove it, you can loop through the routes of the router and remove the one with method delete. Something like this:

users_router = fastapi_users.get_users_router()
users_router.routes = [route for route in users_router.routes if route.name != "delete_user"]
app.include_router(users_router, prefix="/users", tags=["users"])

2. The library provides a dependency for this. See the docs here: https://frankie567.github.io/fastapi-users/usage/dependency-callables/

[migeruj]

Terrific! Actually, I didn't pay attention to dependency callables. Thank you for providing the requested information. I am learning so much about fastapi now.

[migeruj]

Forgot to close. Thanks

[NickNaskida]

Note: fastapi-users v1.12 route name changed to users:delete_user

users_router.routes = [route for route in users_router.routes if route.name != "users:delete_user"]