authgear-server
authgear-server copied to clipboard
Allow user to modify email/phone/username but not removing them
Authgear provides a setting that forbids the users to add/update/remove the identity after signup.
However, in the actual use cases, it's likely the developer wants to have these 3 operations disallowed independently.
For example, the app allows login with phone or email, they allows the user to add emails as identity later, to change it, but don't want to let the users remove it entirely.
Multiple emails
- Authgear supports more than 1 email per user, another likely scenerio is that we want the user to have at least one email, and allow them to remove other extras.
- Which means the users cannot remove the last email address, but allow them to remove if there is more than 1.
Todo
- Separate the option into 3 settings, for all "Email", "Phone" and "Username". 9 Options in total.