harden account deletion

This commit is contained in:
2022-02-12 00:34:11 -05:00
parent c0b3de75a9
commit 332f92a02f
3 changed files with 32 additions and 16 deletions

View File

@ -70,9 +70,9 @@ defmodule CanneryWeb.UserSettingsController do
end
end
def delete(conn, %{"id" => user_id}) do
if user_id == conn.assigns.current_user.id do
Accounts.delete_user!(conn.assigns.current_user)
def delete(%{assigns: %{current_user: current_user}} = conn, %{"id" => user_id}) do
if user_id == current_user.id do
current_user |> Accounts.delete_user!(current_user)
conn
|> put_flash(:error, dgettext("prompts", "Your account has been deleted"))