OAuth tokens aren't removed on account deletion

Status
This content is read-only, or is not open for further replies.

stromb0li

Guest
offline
It looks like oauth tokens aren't cleaned up during account deletion.

The User entity's _postDelete() doesn't seem to invoke cleanup on these tables, nor do I see anything in DeleteCleanUpService.php

Tables in question:
  • xf_api_login_token
  • xf_oauth_token
  • xf_oauth_request
  • xf_oauth_refresh_token

Continue reading...
 
Liked by:
Status
This content is read-only, or is not open for further replies.
Top Bottom