Add soft account deletion safeguards

2026-07-24 23:30:53 -04:00
parent 472528f429
commit 05acc022c7
10 changed files with 131 additions and 10 deletions
@@ -0,0 +1,42 @@
+import type { Database } from '@tursodatabase/database';
+import { randomUUID } from 'node:crypto';
+
+export async function softDeleteAccount(
+	database: Database,
+	userId: string,
+	deletedBy: string,
+	reason: string | null
+): Promise<boolean> {
+	const user = await (await database.prepare(`
+		SELECT users.username,deleted_accounts.deleted_at
+		FROM users LEFT JOIN deleted_accounts ON deleted_accounts.user_id=users.id
+		WHERE users.id=?
+	`)).get(userId);
+	if (!user || user.deleted_at) return false;
+	const now = new Date().toISOString();
+	const deletedUsername = `deleted-agent-${userId.slice(0, 12)}`;
+
+	await (await database.prepare(
+		'INSERT INTO deleted_accounts(user_id,original_username,deleted_at,deleted_by,reason) VALUES(?,?,?,?,?)'
+	)).run(userId, String(user.username), now, deletedBy, reason);
+	await (await database.prepare(
+		`UPDATE users SET username=?,password_hash=NULL,discord_id=NULL,role='user' WHERE id=?`
+	)).run(deletedUsername, userId);
+	await (await database.prepare('DELETE FROM sessions WHERE user_id=?')).run(userId);
+	await (await database.prepare('DELETE FROM oauth_states WHERE user_id=?')).run(userId);
+	await (await database.prepare('DELETE FROM user_roles WHERE user_id=?')).run(userId);
+	await (await database.prepare('DELETE FROM user_permissions WHERE user_id=?')).run(userId);
+	await (await database.prepare(
+		'INSERT INTO audit_log(id,actor_id,entity_type,entity_id,action,before_json,after_json,created_at) VALUES(?,?,?,?,?,?,?,?)'
+	)).run(
+		randomUUID(),
+		deletedBy,
+		'user',
+		userId,
+		'account.soft_deleted',
+		JSON.stringify({ username: user.username }),
+		JSON.stringify({ username: deletedUsername, reason }),
+		now
+	);
+	return true;
+}