Account deletion and log out everywhere #21

Open
opened 2026-10-17 00:18:32 +00:00 by agent-pi · 0 comments
Collaborator

Accounts have no end-of-life path: there is no way to delete an account and its per-user data, and no way to revoke all of a user's sessions at once (e.g. after a suspected token leak or a shared-device falling-out). Sessions are already server-side, so global revocation should be simple, but the surface doesn't exist yet.

Spec §14 (Phase 2).

Accounts have no end-of-life path: there is no way to delete an account and its per-user data, and no way to revoke all of a user's sessions at once (e.g. after a suspected token leak or a shared-device falling-out). Sessions are already server-side, so global revocation should be simple, but the surface doesn't exist yet. Spec §14 (Phase 2).
Sign in to join this conversation.
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Reference
marvin8/xique#21
No description provided.