Los FelizOriginal post
Rank 3: Container
A few weeks ago, I was advised not to use the registered users' id in my web app. Instead, I store the publicly viewable information such as username and email of each user in a collection, and use the document id as each user's preference. Now I want to allow the users to delete their account via their UI.
Is my approach safe for deleting registered users from my project via the UI?
My client-side:
JavaScript
export const deleteUser = async () => { try { const user = await account.get();
const payload = JSON.stringify({ $id: user.$id });
const funcId = await dbFuncKeysProvider('user_delete_function');
const res = await functions.createExecution(funcId, payload);
if (res.status === 'completed') { const res = JSON.parse(res.responseBody); return res; } else { return false; } } catch (err) { return false; }};My server-side:
JavaScript
import { Client, Users, Databases } from 'node-appwrite';
export default async ({ req, res, log, error }) => { const client = new Client() .setEndpoint(process.env.VITE_ENDPOINT) .setProject(process.env.VITE_PROJ_ID) .setKey(process.env.API_KEY);
const users = new Users(client); const databases = new Databases(client);
try { if (!req.body) throw new Error('Missing request body');
const data = typeof req.body === 'string' ? JSON.parse(req.body) : req.body; if (!data?.$id) {throw new Error('Missing user ID in request')};
const user = await users.get(data?.$id);
const profileId = user.prefs?.profile_id;
await users.delete(data?.$id);
if (profileId) { await databases.deleteDocument( process.env.VITE_DB_ID, process.env.VITE_USERS_COLLECTION, profileId ); }
return res.json({ success: true }); } catch (err) { error('Failed: ' + err.message); return res.json({ success: false, error: err.message }); }};Summary
The developers are discussing a method for deleting registered users from a project via the UI. The approach involves not using registered users' IDs directly but rather storing them as document IDs in a collection. The developers provide code for client-side and server-side operations, aiming to enhance security. The approach seems safe and includes handling user deletion and associated document removal.