zhenyi
cec6dce955
- Add git operation endpoints: archive, compare branches, diff, tree, repository extras - Add repo endpoints: contributors, delete fork, get branch/commit status/deploy key/invitation/member/release/tag/webhook, topics, release assets, webhook deliveries/retry - Add PR endpoints: review requests, templates - Add user endpoints: block/unblock, follow/unfollow, presence, personal access tokens, account restore - Add workspace endpoints: billing history, approvals, domains, integrations, invitations, members, webhooks, restore - Add internal API, notification API, IM API modules - Update route configuration and OpenAPI spec
52 lines
2.1 KiB
Rust
52 lines
2.1 KiB
Rust
use actix_web::{HttpResponse, web};
|
|
|
|
use crate::api::response::{ApiErrorResponse, ApiResponse};
|
|
use crate::error::AppError;
|
|
use crate::service::AppService;
|
|
use crate::session::Session;
|
|
|
|
/// Delete user account
|
|
///
|
|
/// Marks the authenticated user's account and all associated data for deletion.
|
|
/// The user's data is soft-deleted (marked as deleted, not physically removed).
|
|
/// A restore link is sent to the user's verified email, valid for 30 days.
|
|
/// Requires authentication and a verified email address.
|
|
///
|
|
/// Preconditions:
|
|
/// - User must have at least one verified email address
|
|
/// - User must transfer or delete all owned workspaces
|
|
/// - User must transfer or delete all owned repositories
|
|
///
|
|
/// Effects:
|
|
/// - All user data is soft-deleted (SSH keys, GPG keys, sessions, devices, etc.)
|
|
/// - Current session is cleared
|
|
/// - A restore token is generated and sent via email
|
|
/// - Account can be restored within 30 days using the restore link
|
|
///
|
|
/// Returns success message on completion.
|
|
#[utoipa::path(
|
|
delete,
|
|
path = "/api/v1/user/account",
|
|
tag = "User",
|
|
operation_id = "userDeleteAccount",
|
|
responses(
|
|
(status = 200, description = "Account marked for deletion. A restore link has been sent to your email.", body = ApiResponse<String>),
|
|
(status = 400, description = "Cannot delete: user still owns workspaces or repositories, or no verified email", body = ApiErrorResponse),
|
|
(status = 401, description = "Authentication required or session expired", body = ApiErrorResponse),
|
|
(status = 404, description = "User not found", body = ApiErrorResponse),
|
|
(status = 500, description = "Internal server error", body = ApiErrorResponse),
|
|
),
|
|
security(
|
|
("session_cookie" = [])
|
|
)
|
|
)]
|
|
pub async fn delete_account(
|
|
service: web::Data<AppService>,
|
|
session: Session,
|
|
) -> Result<HttpResponse, AppError> {
|
|
service.user.user_delete_account(&session).await?;
|
|
Ok(HttpResponse::Ok().json(ApiResponse::new(
|
|
"Account deletion scheduled. A restore link has been sent to your email.".to_string(),
|
|
)))
|
|
}
|