Leon SerfatyandClaude Fable 5
5a555c715e
- Data export (Art. 15/20): GET /api/gdpr/export serves a full JSON export of the user's data (credentials/tokens excluded, exclusions declared) - Right to erasure (Art. 17): self-service deletion with 30-day grace period (Settings -> Privacy & Data), cancellable; daily /api/cron/gdpr drain cancels Stripe billing, purges Spaces files, cascade-deletes the account, anonymizes consent rows, and writes audit evidence - Migration 0011: account_deletion_requests (partial unique index = one pending per user) + FK-less consent_log (survives erasure) - Consent: terms/privacy acceptance logged at signup (email + Google); cookie banner with analytics opt-out (umami.disabled), choices logged server-side for signed-in users via POST /api/gdpr/consent - Admin deleteUser upgraded to the same full purge (was leaving Spaces files and Stripe subscriptions orphaned) - /gdpr legal page now points at the self-service tools - scripts/verify-gdpr.ts: end-to-end verification vs live dev DB (22/22) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
28 lines
1.1 KiB
TypeScript
28 lines
1.1 KiB
TypeScript
import { NextResponse } from "next/server"
|
|
import { db } from "@/lib/db"
|
|
import { usage_events } from "@/lib/db/schema"
|
|
import { getSessionUser } from "@/lib/session"
|
|
import { buildUserDataExport } from "@/lib/gdpr/export"
|
|
|
|
// GDPR data export (Articles 15/20) — downloads everything the platform stores
|
|
// about the signed-in user as a single JSON file. Sensitive credentials are
|
|
// excluded by the builder (see lib/gdpr/export.ts).
|
|
export async function GET() {
|
|
const user = await getSessionUser()
|
|
if (!user) return NextResponse.json({ error: "Unauthorized" }, { status: 401 })
|
|
|
|
const data = await buildUserDataExport(user.id)
|
|
|
|
// DSAR evidence: record that the export was served.
|
|
await db.insert(usage_events).values({ user_id: user.id, event_type: "gdpr_data_export" })
|
|
|
|
const filename = `pmn-data-export-${new Date().toISOString().slice(0, 10)}.json`
|
|
return new NextResponse(JSON.stringify(data, null, 2), {
|
|
headers: {
|
|
"Content-Type": "application/json",
|
|
"Content-Disposition": `attachment; filename="${filename}"`,
|
|
"Cache-Control": "no-store",
|
|
},
|
|
})
|
|
}
|