nachol_Original post
Rank 1: Thread
I'm using users api from a cloud function to delete users
https://appwrite.io/docs/references/cloud/server-nodejs/users#delete
But this only require user id
Wouldn't be a good practice to require user password before deleting account?
Just like update password
https://appwrite.io/docs/references/cloud/client-web/account#updatePassword
https://appwrite.io/docs/references/cloud/server-nodejs/users#updatePassword
A person who is not the owner of the account could use user PC to delete its account
Summary
Solution:
Developers can implement an additional security measure by requiring the user's password before allowing the deletion of an account. This can be similar to the password update feature. This extra step would increase the security of the deletion process, preventing unauthorized deletion by someone accessing the user's device.