Leon SerfatyandClaude Fable 5
5a555c715e
- Data export (Art. 15/20): GET /api/gdpr/export serves a full JSON export of the user's data (credentials/tokens excluded, exclusions declared) - Right to erasure (Art. 17): self-service deletion with 30-day grace period (Settings -> Privacy & Data), cancellable; daily /api/cron/gdpr drain cancels Stripe billing, purges Spaces files, cascade-deletes the account, anonymizes consent rows, and writes audit evidence - Migration 0011: account_deletion_requests (partial unique index = one pending per user) + FK-less consent_log (survives erasure) - Consent: terms/privacy acceptance logged at signup (email + Google); cookie banner with analytics opt-out (umami.disabled), choices logged server-side for signed-in users via POST /api/gdpr/consent - Admin deleteUser upgraded to the same full purge (was leaving Spaces files and Stripe subscriptions orphaned) - /gdpr legal page now points at the self-service tools - scripts/verify-gdpr.ts: end-to-end verification vs live dev DB (22/22) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
37 lines
1.2 KiB
TypeScript
37 lines
1.2 KiB
TypeScript
import { NextResponse } from "next/server"
|
|
import { headers } from "next/headers"
|
|
import { db } from "@/lib/db"
|
|
import { consent_log } from "@/lib/db/schema"
|
|
import { getSessionUser } from "@/lib/session"
|
|
import { LEGAL } from "@/lib/legal"
|
|
|
|
// Records a cookie-consent choice from the banner. Only signed-in users are
|
|
// logged — anonymous visitors keep their choice in localStorage only, so this
|
|
// endpoint can't be used to spam the consent table.
|
|
export async function POST(request: Request) {
|
|
const user = await getSessionUser()
|
|
if (!user) return new NextResponse(null, { status: 204 })
|
|
|
|
let analytics = false
|
|
try {
|
|
const body = await request.json()
|
|
analytics = body?.analytics === true
|
|
} catch {
|
|
return NextResponse.json({ error: "Invalid body" }, { status: 400 })
|
|
}
|
|
|
|
const h = await headers()
|
|
await db.insert(consent_log).values({
|
|
user_id: user.id,
|
|
email: user.email,
|
|
kind: "cookies",
|
|
granted: analytics,
|
|
policy_version: LEGAL.lastUpdated,
|
|
source: "cookie-banner",
|
|
ip_address: h.get("x-forwarded-for")?.split(",")[0]?.trim() ?? h.get("x-real-ip"),
|
|
user_agent: h.get("user-agent"),
|
|
})
|
|
|
|
return NextResponse.json({ ok: true })
|
|
}
|