AOSSIE-Org / AOSSIE-Org/Resonate
🐛 Bug Report: Account Deletion Does Not Permanently Remove User Data
- Vorherrschende Sprache
- Dart
- Sterne
- 344
- Forks
- 350
- PR-Merge-Kennzahlen
- Keine gemergten PRs in 30 T.
Beschreibung
### 🐛 Describe the bug
---
## Description
While testing the mobile application, I observed that the account deletion feature does not permanently remove the user account and associated data.
Even after completing the deletion process (including typing the username for confirmation), the account remains accessible.
This behavior may create privacy and data control concerns.
---
## Steps to Reproduce
1. Open the mobile application.
2. Log in with a registered account.
3. Navigate to **Account Settings**.
4. Select **Delete Account**.
5. Enter the username for confirmation (if required).
6. Complete the deletion process.
---
## Expected Behavior
- The account should be permanently deleted from the system.
- The user should not be able to log in again using the same credentials.
- All associated user data should be removed from the backend.
- A clear confirmation message should indicate successful permanent deletion.
---
## Actual Behavior
- The account remains accessible after deletion.
- The user is still able to log in with the same credentials.
- User data appears to persist in the system.
.
---
## Impact
- Users do not have full control over their data.
- Potential privacy and compliance concerns.
- Reduced trust in account management functionality.
---
## Suggested Improvement
- Ensure backend permanently deletes user records.
- Immediately invalidate authentication tokens after deletion.
- Prevent login attempts with deleted credentials.
- Provide clear confirmation of permanent deletion.
---
## Evidence
A screen recording demonstrating the issue is attached to this report
https://github.com/user-attachments/assets/8ea72010-548a-42c8-a54b-3b344d7d627c
Beitragsleitfaden
Bewertung
Dieses Issue wurde noch nicht bewertet.