-
Notifications
You must be signed in to change notification settings - Fork 0
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add Inactive account endpoint #5
Conversation
Adds functionality to automatically deactivate identities that have been inactive for a configurable period. Key changes: - Add config option for inactivity threshold period - Add API endpoint to list and deactivate inactive identities - Add SQL queries to find and update inactive identities - Add manager and persister methods to handle deactivation
@aalkhodiry For the schema version source I was able to point to nayla version by adding this comment at the top of # yaml-language-server: $schema=https://raw.githubusercontent.com/nayla-finance/kratos/refs/heads/master/.schema/version.schema.json |
"id": id.ID, | ||
"state": id.State, | ||
"created_at": id.CreatedAt, | ||
"updated_at": id.UpdatedAt, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this should include a last activity field some how (like last_session_at
)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes I agree it'll be easier to add a last_active_at
to identities table and update it on every login which will make the lookup for inactive much easier. with this we don't need to keep at least one session for each identity we can just run a job to delete all the sessions every few days
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No not like this, I mean last_active_at is the max session time in the query
Inactive Account Management
Changes Made
Why
To enhance security and resource management by automatically identifying and handling dormant accounts. This feature allows administrators to:
Technical Details