Delete the signed-in account after a recent login
POST/identity/settings/account-deletion
Requires a login within the last hour and the account's own email address, compared after normalization. The request locks the account at once: from its commit the cookie reads as a guest and login answers wrong_password. A worker job then deletes the account's data. Administrators and banned accounts are refused.
Request
Responses
- 202
- 400
- 401
- 403
- 409
- 503
Accepted; the account is locked and its deletion is queued
Response Headers
Set-Cookie
Clears the tenant-specific session cookie.
Request rejected
Request rejected
Request rejected
Request rejected
Request rejected