/* Spacebar: A FOSS re-implementation and extension of the Discord.com backend. Copyright (C) 2023 Spacebar and Spacebar Contributors This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Affero General Public License for more details. You should have received a copy of the GNU Affero General Public License along with this program. If not, see . */ import { route } from "@spacebar/api"; import { emitEvent, Member, PrivateUserProjection, User, UserDeleteEvent, } from "@spacebar/util"; import { Request, Response, Router } from "express"; const router = Router(); router.post( "/", route({ right: "MANAGE_USERS" }), async (req: Request, res: Response) => { await User.findOneOrFail({ where: { id: req.params.id }, select: [...PrivateUserProjection, "data"], }); await Promise.all([ Member.delete({ id: req.params.id }), User.delete({ id: req.params.id }), ]); // TODO: respect intents as USER_DELETE has potential to cause privacy issues await emitEvent({ event: "USER_DELETE", user_id: req.user_id, data: { user_id: req.params.id }, } as UserDeleteEvent); res.sendStatus(204); }, ); export default router;