feat: privacy policy + download data & delete account

website/src/routes/api/settings/delete-account/+server.ts

@@ -0,0 +1,58 @@
+import { auth } from '$lib/auth';
+import { error, json } from '@sveltejs/kit';
+import { db } from '$lib/server/db';
+import { user, accountDeletionRequest } from '$lib/server/db/schema';
+import { eq } from 'drizzle-orm';
+
+export async function POST({ request }) {
+    const authSession = await auth.api.getSession({
+        headers: request.headers
+    });
+
+    if (!authSession?.user) {
+        throw error(401, 'Not authenticated');
+    }
+
+    const userId = Number(authSession.user.id);
+    const body = await request.json();
+    const { confirmationText } = body;
+
+    if (confirmationText !== 'DELETE MY ACCOUNT') {
+        throw error(400, 'Invalid confirmation text');
+    }
+
+    const scheduledDeletionAt = new Date();
+    scheduledDeletionAt.setDate(scheduledDeletionAt.getDate() + 14);
+
+    await db.transaction(async (tx) => {
+        const existingRequest = await tx.select()
+            .from(accountDeletionRequest)
+            .where(eq(accountDeletionRequest.userId, userId))
+            .limit(1);
+
+        if (existingRequest.length > 0) {
+            throw new Error('Account deletion already requested');
+        }
+
+        await tx.insert(accountDeletionRequest).values({
+            userId,
+            scheduledDeletionAt,
+            reason: 'User requested account deletion'
+        });
+
+        await tx.update(user)
+            .set({
+                isBanned: true,
+                banReason: 'Account deletion requested - scheduled for ' + scheduledDeletionAt.toISOString(),
+                updatedAt: new Date()
+            })
+            .where(eq(user.id, userId));
+    });
+
+
+    return json({
+        success: true,
+        message: `Account deletion has been scheduled for ${scheduledDeletionAt.toLocaleDateString()}. Your account has been temporarily suspended. You can cancel this request by contacting support before the scheduled date.`,
+        scheduledDeletionAt: scheduledDeletionAt.toISOString()
+    });
+}