Dmitry VerkhoturovandUmputun 3fc5d6b970 fix: make user deletion idempotent for users without comments ...

deleteUser now succeeds for a user who has no comments (e.g. one who only logged
in) instead of failing on the missing per-user bucket. In hard mode the per-user
bucket is deleted, tolerating bbolt's ErrBucketNotFound so a bucket left behind by
an earlier partial removal is still removed; the comment-deletion failure path now
wraps the actual error.

Because the engine cannot distinguish a valid login-only user from a never-existed
one, deletion is idempotent: /admin/deleteme returns 200 for an unknown (but validly
signed) token rather than 400. The deleteme test is updated to this contract, engine
tests cover hard and soft deletion of login-only and unknown users, and the API docs
note the idempotent behaviour.

2026-07-01 15:05:27 -05:00

..

bolt_test.go

fix: make user deletion idempotent for users without comments

2026-07-01 15:05:27 -05:00

bolt.go

fix: make user deletion idempotent for users without comments

2026-07-01 15:05:27 -05:00

engine_mock.go

fix: IPv6 address truncation and image proxy SSRF vulnerabilities

2026-02-28 04:13:07 -06:00

engine_test.go

test(store): use time.UTC in test fixtures to be timezone-agnostic

2026-04-17 19:38:11 -05:00

engine.go

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

remote_test.go

make Close() calls idempotent

2023-01-03 01:41:26 -06:00

remote.go

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00