feat: add an admin API to lock/unlock an account

[drev74]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Ory Network Project

No response

Describe your problem

I need to programmatically lock/unlock a user account. This is a normal practice in multiuser system. Then admin or support unlocks the account after user request

Describe your ideal solution

1. Add a a boolean field locked into table identities
2. Add two admin methods to lock/unlock the identity by setting/clearing this field

Workarounds or alternatives

I see another field called active. It is used to describe a state and prevent login before confirming email. This could be used to add a state = locked, but I still prefer to add a new boolean field locked.

Version

master

Additional Context

No response

[alnr]

The active field is what you are looking for I think. Have you tried it?

[drev74]

active becomes true after email confirmation. If I block a user, how do you distinguish between a blocked and unconfirmed accounts ?

[cm-sentinel]

active becomes true after email confirmation. If I block a user, how do you distinguish between a blocked and unconfirmed accounts ?

It sounds like this would require active to refactor from a bool to an enum of states. Correct?