External/SnapOtter
1
0
Fork 0
mirror of https://github.com/snapotter-hq/SnapOtter.git synced 2026-08-03 07:46:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

feat(enterprise): add GDPR user/team data purge with audit redaction

Browse Source
This commit is contained in:
SnapOtter
2026-06-13 21:13:22 +08:00
parent b6a8226837
commit dd2a50799a
2 changed files with 302 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/integration/gdpr-lifecycle.test.ts
+74
View File
@@ -54,6 +54,15 @@ describe("GDPR data export", () => {
expect(res.statusCode).toBe(401);
});
it("returns 401 for DELETE purge without auth", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/users/some-id/purge",
payload: { confirm: true },
});
expect(res.statusCode).toBe(401);
});
it("returns 403 for non-admin user", async () => {
// Create a regular user
await testApp.app.inject({
@@ -87,3 +96,68 @@ describe("GDPR data export", () => {
expect(res.statusCode).toBe(403);
});
});
describe("GDPR data purge", () => {
it("returns 403 without enterprise license for user purge", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/users/some-id/purge",
headers: { authorization: `Bearer ${adminToken}` },
payload: { confirm: true },
});
expect(res.statusCode).toBe(403);
const body = JSON.parse(res.body);
expect(body.error).toContain("enterprise");
});
it("returns 403 without enterprise license for team purge", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/teams/some-id/purge",
headers: { authorization: `Bearer ${adminToken}` },
payload: { confirm: true },
});
expect(res.statusCode).toBe(403);
const body = JSON.parse(res.body);
expect(body.error).toContain("enterprise");
});
it("requires confirmation body for purge", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/users/some-id/purge",
headers: { authorization: `Bearer ${adminToken}` },
payload: {},
});
// Should fail validation (400 or 403 depending on feature check order)
expect([400, 403]).toContain(res.statusCode);
});
it("rejects purge with confirm: false", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/users/some-id/purge",
headers: { authorization: `Bearer ${adminToken}` },
payload: { confirm: false },
});
expect([400, 403]).toContain(res.statusCode);
});
it("returns 401 for user purge without auth", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/users/some-id/purge",
payload: { confirm: true },
});
expect(res.statusCode).toBe(401);
});
it("returns 401 for team purge without auth", async () => {
const res = await testApp.app.inject({
method: "DELETE",
url: "/api/v1/enterprise/teams/some-id/purge",
payload: { confirm: true },
});
expect(res.statusCode).toBe(401);
});
});