MongooseIM icon indicating copy to clipboard operation
MongooseIM copied to clipboard

Not possible to delete the data of JWT users

Open rthouvenin opened this issue 6 months ago • 0 comments

MongooseIM version: 6.2.1 Installed from: docker

I have configured a MongooseIM instance with JWT authentication and RDBMS (postgresql) storage for mam and inbox, and for GDPR compliancy I would like to be able to delete all the personal data of a user from the Admin HTTP API.

I am able to connect to the API and request the list of users, but the returned list is empty and requesting the delete of a user yields the reply "User does not exist or you are not authorized properly". The users table is indeed empty, but all the users that connected to the server and exchanged messages have records in the table mam_server_user and data in mam_message or inbox tables.

How can I delete the data of a user when I am using JWT authentication? Is there another API endpoint that behaves differently? Do I need to register users, even though it is not needed for them to connect and use the server ?

rthouvenin avatar Jul 30 '24 07:07 rthouvenin