Expand description
Erase product data atomically and choose whether to delete the identity account.
Structs§
- ApiDeletion
Config - API credentials for an identity provider. The key never appears in errors.
- Clerk
Account Deleter - Clerk Backend API user deletion. WorkerRunner retries temporary failures.
- Erasure
Outcome - Safe response and replay receipt.
- Erasure
Service - Coordinates product erasure and the chosen identity retention mode.
- Identity
Deletion Handler - Lease-aware identity deletion handler. WorkerRunner supplies retry backoff.
- Keycloak
Account Deleter - Dedicated Keycloak admin client, with no proxy or redirects.
- Keycloak
Deletion Config - Confidential service-account configuration.
- Postgres
Erasure Store - PostgreSQL receipt and fence store. Products apply the reference migration.
- Work
OsAccount Deleter - WorkOS User Management deletion. WorkerRunner retries temporary failures.
Enums§
- Erasure
Error - Errors before durable acceptance. Database errors may require client reconciliation.
- Erasure
Preflight - Read-only admission result before external erasure notifications.
- Erasure
State - Persistent erasure state.
- Identity
Deletion Error - Safe failure classes. Errors never include provider bodies, subjects, or credentials.
- Identity
Retention - Whether product erasure also deletes the identity provider account.
Constants§
- IDENTITY_
DELETE_ JOB_ TYPE - Durable job identifier.
- POSTGRES_
MIGRATION_ SQL - Reference migration to copy after the baukit-jobs migrations.
- POSTGRES_
REONBOARDING_ MIGRATION_ SQL - Reference migration to copy after 0001 erasure.
Traits§
- Identity
Account Deleter - Provider-neutral account deletion. An absent account is successful deletion.
- Product
Erasure - Product-owned deletion executed inside the erasure transaction.
Functions§
- reject_
fenced_ subject - Axum handler helper. Call after authentication, before any product operation.
Type Aliases§
- Erasure
Future - Boxed asynchronous result used by erasure ports.