Hi all, I’m looking for some input on creating Kra...
# general
b
Hi all, I’m looking for some input on creating Kratos accounts for people that have been invited to collaborate with our users via the admin API before they register. I’ve got questions around to handle claiming accounts. (Details in replies to keep from clogging General)
We currently allow users to share a document by email address. On our server, we check whether that email address is already associated with an account and if so, we grant permissions. However, if the email address is not associated with an account, we currently create a “pending permission” record in our database. If someone creates an account (via Kratos) with that email address in the future, the pending permission is converted into an actual permission that gives their account access to the document. We’re now looking at adding additional types of pending documents (e.g. assigning someone a task) that we would like to treat similarly to how we handle pending permissions. To simplify the process, we’re considering creating an account in Kratos for the pending user (similar to the Invite users example). That way, we can just use that account (for permissions, assigment, etc) whether or not it’s been claimed yet. Questions I’ve got: 1. Is it possible for a user to claim a pending account (i.e. one that has no credentials) via the standard registration flow? Ideally if they attempt to register, we can send an email that allows them to claim their account, but I’m not exactly sure what the flow would look like. 2. Are there any downsides to having accounts without credentials in Kratos? Thank you!