How to suspend a user from login?

[iamdineshkumar]

I need to retain user informaiton and need to suspend user from login. So later require particular user can be changed to active status. How to achieve this?

[ganigeorgiev]

There is no global toggle for this out of the box.

If you use PocketBase as framework, you can disable the email login for a particular user using the OnRecordBeforeAuthWithPasswordRequest and return an error (or define a global middleware to intercept the /api/collection/users/auth-with-password call).

app.OnRecordBeforeAuthWithPasswordRequest().Add(func(e *core.RecordAuthWithPasswordEvent) error {
	if e.Record != nil && e.Record.Email() == "block@example.com" {
		return apis.NewForbiddenError("You are not allowed to perform this action", nil)
	}

	return nil
})

If you want to disable also the OAuth2 logins for accounts with the specified email, you can make use of the more generic OnRecordAuthRequest hook (it executes after the authentication and right before returning the token response).

[iamdineshkumar]

I am thinking about having a bool field status in user collection which hold true(Active user) or false(Suspend). In case true then can be allowed to login else need to disallow. How to achive this? Whether e.Record will have all details?

[ganigeorgiev]

Whether e.Record will have all details?

Yes, you can access the record fields using the Get*/Set helpers, eg.:

app.OnRecordBeforeAuthWithPasswordRequest().Add(func(e *core.RecordAuthWithPasswordEvent) error {
    if e.Record != nil && !e.Record.GetBool("yourBoolField") {
        return apis.NewForbiddenError("You are not allowed to perform this action", nil)
    }

    return nil
})