blackteay/open-im-server
1
0
Fork 0
mirror of https://github.com/openimsdk/open-im-server.git synced 2026-07-14 01:54:26 +08:00
Code Issues Packages Projects Releases Wiki Activity

delete account

Browse Source
This commit is contained in:
hawklin2017 2026-05-07 18:51:17 +08:00
parent 90f326b4f4
commit 21088f2176
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
internal/api/delete_user.go
View File

@ -46,14 +46,15 @@ type deleteUserReq struct {
// DeleteUser permanently deletes a user account and cleans up associated data. // DeleteUser permanently deletes a user account and cleans up associated data.
// Steps: force-logout → delete friends → quit/kick groups → hard-delete user doc. // Steps: force-logout → delete friends → quit/kick groups → hard-delete user doc.
// Only IM admins may call this endpoint. // Caller must be the same user as userID, or an IM admin (see CheckAccessV3).
func (d *DeleteUserApi) DeleteUser(c *gin.Context) { func (d *DeleteUserApi) DeleteUser(c *gin.Context) {
var req deleteUserReq var req deleteUserReq
if err := c.ShouldBindJSON(&req); err != nil { if err := c.ShouldBindJSON(&req); err != nil {
apiresp.GinError(c, errs.ErrArgs.WrapMsg(err.Error())) apiresp.GinError(c, errs.ErrArgs.WrapMsg(err.Error()))
return return
} }
if err := authverify.CheckAdmin(c, d.imAdminUserIDs); err != nil { // Only the user themselves (or an IM admin) may delete the account.
if err := authverify.CheckAccessV3(c, req.UserID, d.imAdminUserIDs); err != nil {
apiresp.GinError(c, err) apiresp.GinError(c, err)
return return
} }

1
internal/api/router.go
View File

@ -180,7 +180,6 @@ func newGinRouter(ctx context.Context, client discovery.SvcDiscoveryRegistry, co
userRouterGroup.POST("/remove_global_blacklist", bl.RemoveGlobalBlacklist) userRouterGroup.POST("/remove_global_blacklist", bl.RemoveGlobalBlacklist)
userRouterGroup.POST("/get_global_blacklist", bl.GetGlobalBlacklist) userRouterGroup.POST("/get_global_blacklist", bl.GetGlobalBlacklist)
// 真实删除账号（仅管理员）
userRouterGroup.POST("/delete_user", du.DeleteUser) userRouterGroup.POST("/delete_user", du.DeleteUser)
} }
// friend routing group // friend routing group