psa-systems/lets-chat
Watch
9
0
Fork
You've already forked lets-chat
 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

feat(account): add self-serve account deletion #84

Merged
nrupard merged 1 commit from feat/account-deletion into main 2026-05-13 18:23:43 +02:00
Conversation 0 Commits 1 Files changed 4 +707
nrupard commented 2026-05-13 18:23:36 +02:00
Owner
Copy link

Adds a Danger zone on the settings page and a POST /settings/delete-account handler that wipes the signed-in user from auth.db and chat.db, removes the avatar file and push subscriptions, clears the session cookie, and broadcasts UserBanned so other connected clients drop the user.

Confirmation requires typing "delete my account"; standalone additionally requires the current password. The handler refuses if the caller is the sole owner of an enclave with other members so the unique partial owner index never traps a member without an owner; an enclave the caller alone owns is removed along with their account.

Co-Authored-By: Claude Opus 4.7 noreply@anthropic.com

Adds a Danger zone on the settings page and a POST /settings/delete-account handler that wipes the signed-in user from auth.db and chat.db, removes the avatar file and push subscriptions, clears the session cookie, and broadcasts UserBanned so other connected clients drop the user. Confirmation requires typing "delete my account"; standalone additionally requires the current password. The handler refuses if the caller is the sole owner of an enclave with other members so the unique partial owner index never traps a member without an owner; an enclave the caller alone owns is removed along with their account. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
feat(account): add self-serve account deletion
Some checks failed
Check / clippy + fmt + tests (pull_request) Failing after 11s
Details
2334446c88 
Adds a Danger zone on the settings page and a POST /settings/delete-account handler that wipes the signed-in user from auth.db and chat.db, removes the avatar file and push subscriptions, clears the session cookie, and broadcasts UserBanned so other connected clients drop the user.

Confirmation requires typing "delete my account"; standalone additionally requires the current password. The handler refuses if the caller is the sole owner of an enclave with other members so the unique partial owner index never traps a member without an owner; an enclave the caller alone owns is removed along with their account.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
nrupard deleted branch feat/account-deletion 2026-05-13 18:23:43 +02:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
psa-systems/lets-chat!84
No description provided.