search

sublinks / sublinks-api

MIT License
68 stars 17 forks source link

Improved Delete Account #345

Open Pdzly opened 2 months ago

Pdzly commented 2 months ago

Have a way to improve the process of a user delete their account.

  1. Verify 2fa or Password if 2fa is not set
  2. Send a "Magic" link to verify the last time ( if email is set otherwise directly to 3 )
  3. Set user to delete = true and deleted_at to the current date ( IMPORTANT later )
  4. Wait a week or so ( configurable by instance admin )
  5. Delete content (images,posts,comments,dms,communities), history for real now.
jgrim commented 2 months ago

There needs to be consideration for accounts without an email set. Magic links won't always be an option.

Is it 2fa if enabled and Password if no 2fa?

Pdzly commented 2 months ago

@jgrim yeah, i edited it, and yeah if 2fa is available 2fa then ONLY use 2fa, if no 2fa is active then password.

But no "workaround" if he loses 2fa and wants to delete his account.