Merge pull request #320 from PretendoNetwork/feat/grace-period

Author: jonbarrow

package-lock.json

@@ -34,6 +34,7 @@
     "colors": "^1.4.0",
     "cors": "^2.8.5",
     "crc": "^4.3.2",
+    "cron": "^4.4.0",
     "dicer": "^0.2.5",
     "dotenv": "^16.0.3",
     "ejs": "^3.1.10",

package.json

@@ -339,3 +339,17 @@ export async function removePNIDConnectionDiscord(pnid: HydratedPNIDDocument): P
 		status: 200
 	};
 }
+
+export async function checkMarkedDeletions(): Promise<void> {
+	const pnids = await PNID.find({
+		marked_for_deletion: true,
+		deleted: false,
+		hard_delete_time: {
+			$lte: new Date()
+		}
+	});
+
+	for (const pnid of pnids) {
+		await pnid.scrub();
+	}
+}

src/database.ts

@@ -53,7 +53,7 @@ async function PNIDMiddleware(request: express.Request, response: express.Respon
 		return;
 	}
 
-	if (pnid.deleted) {
+	if (pnid.deleted || pnid.marked_for_deletion) {
 		response.status(400).send(xmlbuilder.create({
 			errors: {
 				error: {

src/middleware/pnid.ts

@@ -33,6 +33,11 @@ const PNIDSchema = new Schema<IPNID, PNIDModel, IPNIDMethods>({
 		type: Boolean,
 		default: false
 	},
+	marked_for_deletion: {
+		type: Boolean,
+		default: false
+	},
+	hard_delete_time: Date,
 	permissions: {
 		type: BigInt,
 		default: 0n
@@ -225,6 +230,11 @@ PNIDSchema.method('generateMiiImages', async function generateMiiImages(): Promi
 	await uploadCDNAsset(config.s3.bucket, `${userMiiKey}/body.png`, miiStudioBodyImageData, 'public-read');
 });
 
+PNIDSchema.method('markForDeletion', function markForDeletion() {
+	this.marked_for_deletion = true;
+	this.hard_delete_time = new Date(Date.now() + (7 * 24 * 3600 * 1000)); // * 7 day grace period
+});
+
 PNIDSchema.method('scrub', async function scrub() {
 	// * Remove all personal info from a PNID
 	// * Username and PID remain so thye do not get assigned again
@@ -287,7 +297,10 @@ PNIDSchema.method('scrub', async function scrub() {
 	});
 
 	this.deleted = true;
-	this.access_level = 0;
+	this.marked_for_deletion = false;
+	if (this.access_level > 0) {
+		this.access_level = 0;
+	}
 	this.server_access_level = 'prod';
 	this.creation_date = '';
 	this.birthdate = '';

src/models/pnid.ts

@@ -3,9 +3,9 @@ import morgan from 'morgan';
 import xmlbuilder from 'xmlbuilder';
 import xmlparser from '@/middleware/xml-parser';
 import { connect as connectCache } from '@/cache';
-import { connect as connectDatabase } from '@/database';
+import { checkMarkedDeletions, connect as connectDatabase } from '@/database';
 import { startGRPCServer } from '@/services/grpc/server';
-import { fullUrl, getValueFromHeaders } from '@/util';
+import { fullUrl, getValueFromHeaders, setupScheduledTasks } from '@/util';
 import { LOG_INFO, LOG_SUCCESS, LOG_WARN } from '@/logger';
 import conntest from '@/services/conntest';
 import cbvc from '@/services/cbvc';
@@ -116,6 +116,10 @@ async function main(): Promise<void> {
 
 	startProvisioner();
 
+	await checkMarkedDeletions();
+
+	setupScheduledTasks();
+
 	app.listen(config.http.port, () => {
 		LOG_SUCCESS(`HTTP server started on port ${config.http.port}`);
 	});

src/server.ts

@@ -102,7 +102,7 @@ router.post('/', async (request: express.Request, response: express.Response): P
 		}
 	}
 
-	if (pnid.deleted) {
+	if (pnid.deleted || pnid.marked_for_deletion) {
 		response.status(400).json({
 			app: 'api',
 			status: 400,

src/services/api/routes/v1/login.ts

@@ -17,7 +17,7 @@ export async function exchangeTokenForUserData(request: ExchangeTokenForUserData
 	}
 
 	return {
-		deleted: pnid.deleted,
+		deleted: pnid.deleted || pnid.marked_for_deletion,
 		pid: pnid.pid,
 		username: pnid.username,
 		accessLevel: pnid.access_level,

src/services/grpc/account/v1/exchange-token-for-user-data.ts

@@ -15,7 +15,7 @@ export async function getUserData(request: GetUserDataRequest): Promise<GetUserD
 	}
 
 	return {
-		deleted: pnid.deleted,
+		deleted: pnid.deleted || pnid.marked_for_deletion,
 		pid: pnid.pid,
 		username: pnid.username,
 		accessLevel: pnid.access_level,

src/services/grpc/account/v1/get-user-data.ts

@@ -17,7 +17,7 @@ export async function deleteAccount(request: DeleteAccountRequest): Promise<Dele
 	try {
 		const email = pnid.email.address;
 
-		await pnid.scrub();
+		pnid.markForDeletion();
 		await pnid.save();
 
 		await sendPNIDDeletedEmail(email, pnid.username);
@@ -26,6 +26,6 @@ export async function deleteAccount(request: DeleteAccountRequest): Promise<Dele
 	}
 
 	return {
-		hasDeleted: pnid.deleted
+		hasDeleted: pnid.deleted || pnid.marked_for_deletion
 	};
 }