Hello everyone! Is there a way to implement a blacklist in Kratos? Specifically, I'm looking to block certain users from obtaining a session token when using the API. Any guidance would be appreciated!

Hello @mysterious-kitchen-18431 You should be able to do that using Ory Actions (basically a webhook that checks an outside list). You can also do it in the identity schema using regex, but I would assume that is a bit clunky for your use case.

Thank you

See the main documentation here: https://www.ory.sh/docs/identities/sign-in/actions Here is an example for a bit more complex use case: https://github.com/ory/examples/tree/master/ory-actions/vpncheck-py

thanks!