[SOLVED] Behavior after blocking an user
Hey guys,
what is the intended behavior when I block an user which has an active session right now? Is it comparable to an IP-ban?
I have a Flutter web app which loads perfectly fine on Google Chrome, Safari and so on.
Step 1: Signing user in on web app on Google Chrome -> Everything fine Step 2: Block Account in the appwrite backend Step 3: Any action in the web app -> Nothing is loading anymore properly which is good Step 3: Opening the web app on Safari (not signed in) -> Nothing is loading anymore properly
Only the account itself is blocked. You might still have a session in safari...can you try opening a private browsing window?
You were right. It was about an old session on Safari. (I asked the person I was testing it on and he told me that he has not been using Safari for the web app before - maybe he forgot). After deleting all sessions before going through the steps, it worked the intended way.
But still:
- Is it a good approach to delete all sessions when blocking a user? There might be another one trying to access the web app from this computer and browser.
- How long are sessions stored? -> Auth Security Tab ✅
That sounds like a good feature request. Would you be able to create a GitHub issue for it?
Just created one https://github.com/appwrite/appwrite/issues/6061 - Thank you very much for your responses so far 🙂 Should this be marked in any way since there wont be a discussion here anymore I suppose
Thank you! You can update the title of the post with the prefix [SOLVED]
[SOLVED] Behavior after blocking an user
