Site Blocklist API

DEPRECATED

This API is deprecated as of SDK 2.0. Flowsta now uses OAuth 2.0 with PKCE exclusively, which does not support client secrets - and the blocklist endpoints depended on client-secret authentication.

Migration

Implement user blocking/banning in your own application database instead. Most applications handle access control at the application level rather than at the authentication provider level: store blocked user IDs (the sub claim from /oauth/userinfo) in your backend and check them when a user signs in or acts.

Next Steps

• OAuth Integration - authentication flows
• SDK Documentation - client library usage