How to fix user_banned: User is banned in Supabase

-- Query the auth.users table
SELECT id, email, banned_until
FROM auth.users
WHERE email = '[email protected]';

const { data: user, error } = await supabase.auth.admin.getUserById(userId);
console.log('Banned until:', user.banned_until);

import { createClient } from '@supabase/supabase-js';

const supabase = createClient(
  process.env.SUPABASE_URL,
  process.env.SUPABASE_SERVICE_ROLE_KEY // Use service role key
);

// Lift the ban by setting ban_duration to "none"
const { data, error } = await supabase.auth.admin.updateUserById(
  userId,
  { ban_duration: 'none' }
);

if (error) {
  console.error('Failed to lift ban:', error);
} else {
  console.log('Ban lifted successfully for user:', userId);
}

const { data, error } = await supabase.auth.signInWithPassword({
  email: email,
  password: password
});

if (error) {
  if (error.message?.includes('user_banned') || error.code === 'user_banned') {
    // Display user-friendly ban message
    alert('Your account has been suspended. Please contact support.');
    // Optionally, redirect to a ban explanation page
    window.location.href = '/account-suspended';
  } else {
    // Handle other authentication errors
    console.error('Login failed:', error.message);
  }
}

// Valid time units: "ns", "us" (or "µs"), "ms", "s", "m", "h"

// Example: Ban for 24 hours
const { data, error } = await supabase.auth.admin.updateUserById(
  userId,
  { ban_duration: '24h' }
);

// Example: Ban for 7 days
const { data, error } = await supabase.auth.admin.updateUserById(
  userId,
  { ban_duration: '168h' } // 7 days * 24 hours
);

// Example: Ban for 30 days
const { data, error } = await supabase.auth.admin.updateUserById(
  userId,
  { ban_duration: '720h' } // 30 days * 24 hours
);

// Example: Long-term ban (100 years - effectively permanent)
const { data, error } = await supabase.auth.admin.updateUserById(
  userId,
  { ban_duration: '876000h' }
);

// Next.js middleware example
import { createMiddlewareClient } from '@supabase/auth-helpers-nextjs';
import { NextResponse } from 'next/server';

export async function middleware(req) {
  const res = NextResponse.next();
  const supabase = createMiddlewareClient({ req, res });

  const { data: { session } } = await supabase.auth.getSession();

  if (session?.user) {
    // Fetch user details to check banned_until
    const { data: user } = await supabase.auth.admin.getUserById(session.user.id);

    if (user?.banned_until && new Date(user.banned_until) > new Date()) {
      // User is banned, sign them out and redirect
      await supabase.auth.signOut();
      return NextResponse.redirect(new URL('/account-banned', req.url));
    }
  }

  return res;
}