graphql-devise / graphql_devise

97%

master: 97%

LAST BUILD ON BRANCH destroy-account-mutation

branch: destroy-account-mutation

CHANGE BRANCH

x

Reset

• destroy-account-mutation
• 102-fix-reconfirmable-mailer
• 112-fix-session-overflow
• add-alternate-account-confirmation-flow
• add-buy-us-a-coffee-section
• add-conditional-authentication
• add-coveralls
• add-credentials-field-login-mutation
• add-frozen-string-literal
• add-gql-2-support
• add-mount-method-option-sanitizer
• additional-mutations-queries
• allow-controller-level-authentication
• allow-raise_user_error_list-customization
• allow_setting_resources_directly_into_schema_during_tests
• alternate-reset-password-flow
• bkp-mount-routes-instrument
• bump-to-v-2.1.0
• bump-to-v1.1.1
• bump-to-v2.2.0
• bump-v2.1.1
• bump-v2.4.0
• bump-version-1.4.0
• bump-version-2.3.0
• case-insensitive-fields
• check-reset-password-token
• correct-confirm-account-resolver-return
• credentials-in-sign-up-mutation
• deprecate-redirect-queries-mutations
• disable-ci-cache
• document-confirmation-new-flow
• drop-support-for-ruby-2.2
• error-code-authentication-error
• explicit-require-schema-file
• fix-alias-concerns
• fix-bug-with-gql-1-10
• fix-ci-dependencies
• fix-coveralls
• fix-generator-specs
• fix-kwargs-in-gql-execute
• fix-link-in-mailers
• fix-namespaced-models-bug
• fix-resource-confirmation-signed-in
• fix-route-reload-devise
• fix-routes-gql-ruby-version-check
• fix-set-resource-eager-load
• fix-unconfirmed-email-confirmation
• generators-use-our-concerns
• gqld-98-insecure-password-reset-mutation
• ignore-reconfirmable-global-devise-config
• improve-doc-performed
• improve-readme-file
• increase-controller-coverage
• load_reqs_with_zeitwerk
• make-authenticatable-type-not-null
• master
• mcelicalderon-add-gql-2.5-support
• mcelicalderon-add-rails-8.0-support
• mcelicalderon-fix-ci
• mcelicalderon-support-gql-2.6.0
• mount-auth-on-main-schema
• public-introspection-mount-option
• rails-8-1-support
• refactor-mount-method-operations
• refactor-mount-method-option-validator
• refactor_routes
• release
• release-gql-1.13-support
• release-v-2.0.0
• release-v1.1.0
• release-v1.3.0
• remove-deprecated-authentication-methods
• remove-deprecated-concerns
• remove-deprecated-queries
• remove-ruby3-spec-check
• resend-confirmation-with-token-mutation
• restrict-dependency-versions
• set-dependency-versions
• silence-deprecation-graphql-definition
• silence-no-fields-warning-on-base-types
• skip-forgery-protection
• splat-gql-devise-context
• support-gql-1.11
• support-gql-1.13-release
• support-graphql-1.13
• temp-do-not-test-ruby-2.2-dta-1.2
• test-again-ci
• test-bug-loader
• test-current-resource-set-public-fields
• test-edge-dependencies-skip-rails
• test-graphql-edge
• test-matrix-enable-rails7
• test-ruby-2.4-again
• test-ruby-2.7
• test-tokens-per-request
• update-readme
• update-readme-2
• use-https-appraisals-github
• use-rspec-4.0
• v0.10.0
• v0.10.1
• v0.11.0
• v0.11.1
• v0.11.2
• v0.11.3
• v0.11.4
• v0.12.0
• v0.12.1
• v0.12.2
• v0.12.3
• v0.13.0
• v0.13.1
• v0.13.2
• v0.13.3
• v0.13.4
• v0.13.5
• v0.13.6
• v0.14.0
• v0.9.0
• v0.9.1
• v0.9.2
• v1-release-doc-update
• whitelist-redirect-urls
• zeitwerk-concern-deprecation

Build # 07841c43-ce24-4c90-9cae-529422bbf946

Build Type

push

circleci

Committed by mcelicalderon

Commit Message

Add opt-in destroy_account mutation

Adds a `destroy_account` mutation that lets an authenticated resource
delete its own account. It destroys `current_resource` and then calls
`remove_resource`, nil-ing the controller resource so devise_token_auth's
`update_auth_header` after_action short-circuits before reloading the
deleted record. This fixes the `ActiveRecord::RecordNotFound` raised when
deleting the signed-in resource.

The operation is opt-in so upgrades never add account deletion to an
existing schema automatically. It is registered with an `allow_destroy`
marker and gated by a new `allow_destroy` mount option: enable it with
`allow_destroy: true` (additive, also works with `skip`) or by listing
`:destroy_account` in `only`. While available but not mounted, a warning
is logged explaining how to opt in; adding `:destroy_account` to `skip`
keeps it out and silences the warning.

Fixes #162, #163

Coverage Stats

30 of 31 new or added lines in 3 files covered. (96.77%)

828 of 858 relevant lines covered (96.5%)

2089.32 hits per line