authgear / authgear/authgear-server
Auto-delete / disable / anonymoize user account with long time no activities
- Dominant language
- Go
- Stars
- 2k
- Forks
- 125
- Avg merge
- 2d 17h
- Merged PRs (30d)
- 32
Description
**Problem**
To support GDPR and avoid privacy problems.
**Appetite**
6 weeks
**Solution**
The brief idea of the feature should consist of:
- an API to report usages/activities of the user account
- a portal config add the following rules:
- if users are inactive for X years/months/days, users will be deleted/disabled/anonymized
- configure an SMS / Email to send notice Y days before the rule activate
- configure an SMS / Email to send notice when the rule is activated
**Rabbit holes**
Details about the solution worth calling out to avoid problems
**No-goes**
Functionality or use cases we intentionally aren’t covering to fit the appetite
Contributor guide
Research direction
The issue names no files, tests, or entry points. Start by mapping the existing user-account lifecycle, portal configuration, usage-reporting API, and SMS/email notification integrations; done would require an agreed design and implementation for inactivity rules, notices, and deletion, disabling, or anonymization.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- authentication, backend-api-design, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100