Leon SerfatyandClaude Fable 5
5a555c715e
- Data export (Art. 15/20): GET /api/gdpr/export serves a full JSON export of the user's data (credentials/tokens excluded, exclusions declared) - Right to erasure (Art. 17): self-service deletion with 30-day grace period (Settings -> Privacy & Data), cancellable; daily /api/cron/gdpr drain cancels Stripe billing, purges Spaces files, cascade-deletes the account, anonymizes consent rows, and writes audit evidence - Migration 0011: account_deletion_requests (partial unique index = one pending per user) + FK-less consent_log (survives erasure) - Consent: terms/privacy acceptance logged at signup (email + Google); cookie banner with analytics opt-out (umami.disabled), choices logged server-side for signed-in users via POST /api/gdpr/consent - Admin deleteUser upgraded to the same full purge (was leaving Spaces files and Stripe subscriptions orphaned) - /gdpr legal page now points at the self-service tools - scripts/verify-gdpr.ts: end-to-end verification vs live dev DB (22/22) Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
27 lines
1010 B
JavaScript
27 lines
1010 B
JavaScript
// DigitalOcean Function invoked by scheduler triggers (see functions/project.yml).
|
|
// Calls the app's protected cron endpoint (`daily`, `late-fees`, `follow-ups`,
|
|
// `webhooks`, or `gdpr`, chosen by the trigger body) with the CRON_SECRET bearer token.
|
|
// nodejs:18 has global fetch.
|
|
async function main(args) {
|
|
const base = (process.env.APP_BASE_URL || "").replace(/\/+$/, "")
|
|
const secret = process.env.CRON_SECRET
|
|
const requested = args && args.job
|
|
const allowed = ["daily", "late-fees", "follow-ups", "webhooks", "gdpr"]
|
|
const job = allowed.includes(requested) ? requested : "daily"
|
|
|
|
if (!base || !secret) {
|
|
return { statusCode: 500, body: "APP_BASE_URL or CRON_SECRET not configured" }
|
|
}
|
|
|
|
const res = await fetch(`${base}/api/cron/${job}`, {
|
|
method: "GET",
|
|
headers: { Authorization: `Bearer ${secret}` },
|
|
})
|
|
const body = await res.text()
|
|
console.log(`cron ${job} -> ${res.status}: ${body.slice(0, 500)}`)
|
|
|
|
return { statusCode: res.status, body }
|
|
}
|
|
|
|
exports.main = main
|