Account deletion endpoint (DELETE /me) — Phase 0 #50

Closed
opened 2026-04-13 14:35:36 +00:00 by alvis · 0 comments
Owner

Implement the full deletion flow from day one per privacy.md: set User.deleted_at, revoke all sessions, emit user.deletion_requested, revoke provider tokens at the provider (not just erase locally), soft-delete module rows, schedule hard-delete at +30d. Playwright test covers the happy path end-to-end.nnDone when: deleting an account from /settings produces a provider-side revoked token within seconds.

Implement the full deletion flow from day one per `privacy.md`: set `User.deleted_at`, revoke all sessions, emit `user.deletion_requested`, revoke provider tokens at the provider (not just erase locally), soft-delete module rows, schedule hard-delete at +30d. Playwright test covers the happy path end-to-end.nn**Done when:** deleting an account from `/settings` produces a provider-side revoked token within seconds.
alvis added this to the M0 — Prototype milestone 2026-04-13 14:35:36 +00:00
alvis added the backend label 2026-04-13 14:35:36 +00:00
alvis closed this issue 2026-04-16 03:28:54 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alvis/oO#50