Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello everyone, I currently have an app where it is required to login with Google, but afterwards the email needs to be checked against an external app/db whether the email exists or not. If it doesn't exist then the authentication attempt should be rejected. How can I do this in Kratos?

Hi <@U041V82NV0R>

you can do this through Kratos webhooks upon registration / login

I assume that the <https://www.ory.sh/docs/kratos/hooks/configure-hooks#flow-interrupting-webhooks|Flow-interrupting webhooks> is the thing I am looking for, correct?

I am also looking to populate additional fields/claims using the same external app/db, can I do that in the same post-login hook? do I use the <https://www.ory.sh/docs/kratos/reference/api#operation/adminUpdateIdentity|adminUpdateIdentity HTTP API> ? Or do I update the corresponding row in the `identities` table directly?

oof, apparently Ory Kratos v0.10.1 doesn't have can_interrupt yet