I’m trying to integrate a Laravel application with Auth0. I’m testing the blocking of an abusive user, but when I fetch the user profile the block key is always false. If the user successfully logged in blocking him afterwards has no effect on the block status when doing Auth::user().
Is this intentional or am I doing something wrong?
The reason this happens is that the user is stored in the session, so as long as his session persists, the profile data at the moment of logging in will remain the same. This is OK for most of the data and for most of the use-cases, I guess, but if I block a user I want him unable to use the app, regardless of his session status, so in order to circumvent this I can check his current block status using the Management API.