Skip to content

Not possible to delete the data of JWT users #4347

@rthouvenin

Description

@rthouvenin

MongooseIM version: 6.2.1
Installed from: docker

I have configured a MongooseIM instance with JWT authentication and RDBMS (postgresql) storage for mam and inbox, and for GDPR compliancy I would like to be able to delete all the personal data of a user from the Admin HTTP API.

I am able to connect to the API and request the list of users, but the returned list is empty and requesting the delete of a user yields the reply "User does not exist or you are not authorized properly".
The users table is indeed empty, but all the users that connected to the server and exchanged messages have records in the table mam_server_user and data in mam_message or inbox tables.

How can I delete the data of a user when I am using JWT authentication? Is there another API endpoint that behaves differently? Do I need to register users, even though it is not needed for them to connect and use the server ?

Metadata

Metadata

Assignees

No one assigned

    Labels

    in backlogCommunity request added to backlog and waiting for implementation.

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions