Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Removing user via command-line tool should also delete user data from brokers #830

Open
adombeck opened this issue Mar 7, 2025 · 0 comments
Labels

Comments

@adombeck
Copy link
Contributor

adombeck commented Mar 7, 2025

The new command-line tool (WIP in #782) will allow to remove users from the authd database. However, in it's current design, it does not remove the user data stored by the broker in /var/snap/<broker>/current/<issuer>/<user>. That directory contains the hashed local password and the token.json with the tokens and UserInfo. That data should also be deleted when the command-line tool is used to remove a user.

The command-line tool talks to authd and should, in my opinion, not talk to the broker directly. Since authd doesn't know where the brokers store this data, I think the brokers should provide a DeleteUser API method which is called by authd.

@adombeck adombeck added the jira label Mar 7, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant