Add self-service account deletion

Settings → Delete account removes the signed-in account and everything it
owns. DELETE /api/me re-checks the password (guarding an unattended session),
then wipes the user's events, config, sessions and user row in one transaction
and removes their photos/<user_id>/ directory. The client clears the account's
local cache and returns to the login screen.

Bumps the service-worker cache so clients pick up the new UI.

Verified: wrong password is rejected (401, data intact); correct password
returns 204, invalidates the session, drops all rows to zero and removes the
photo dir; the email can be re-registered afterwards. Confirmed end to end in
a headless-browser run of the Settings → delete flow.

This commit is contained in:

Alexander Heldt

2026-07-09 19:20:40 +00:00

parent acf2931fb4

commit 5c016ca49e

7 changed files with 152 additions and 2 deletions

									
										src/sw.js
									
		+1
		-1
	
												View File
												
				@@ -1,4 +1,4 @@

				const CACHE = "puppy-tracker-v6";

				const CACHE = "puppy-tracker-v7";

				const PHOTO_CACHE = "puppy-tracker-photos-v1";

				const ASSETS = [

				  "./",