habitica/scripts/gdpr-delete-users.js

/* eslint-disable no-console */
import axios from 'axios'; // eslint-disable-line import/no-extraneous-dependencies
import nconf from 'nconf';
import { model as User } from '../website/server/models/user';

const AMPLITUDE_KEY = nconf.get('AMPLITUDE_KEY');
const AMPLITUDE_SECRET = nconf.get('AMPLITUDE_SECRET');
const BASE_URL = nconf.get('BASE_URL');

async function deleteAmplitudeData (userId, email) {
  const response = await axios.post(
    'https://amplitude.com/api/2/deletions/users',
    {
      user_ids: userId, // eslint-disable-line camelcase
      requester: email,
    },
    {
      auth: {
        username: AMPLITUDE_KEY,
        password: AMPLITUDE_SECRET,
      },
    },
  ).catch(err => {
    console.log(err.response.data);
  });

  if (response) console.log(`${response.status} ${response.statusText}`);
}

async function deleteHabiticaData (user, email) {
  await User.update(
    { _id: user._id },
    {
      $set: {
        'auth.local.email': email,
        'auth.local.hashed_password': '$2a$10$QDnNh1j1yMPnTXDEOV38xOePEWFd4X8DSYwAM8XTmqmacG5X0DKjW',
        'auth.local.passwordHashMethod': 'bcrypt',
      },
    },
  );
  const response = await axios.delete(
    `${BASE_URL}/api/v3/user`,
    {
      data: {
        password: 'test',
      },
      headers: {
        'x-api-user': user._id,
        'x-api-key': user.apiToken,
      },
    },
  ).catch(err => {
    console.log(err.response.data);
  });

  if (response) {
    console.log(`${response.status} ${response.statusText}`);
    if (response.status === 200) console.log(`${user._id} (${email}) removed. Last login: ${user.auth.timestamps.loggedin}`);
  }
}

async function processEmailAddress (email) {
  const emailRegex = new RegExp(`^${email}$`, 'i');
  const users = await User.find({
    $or: [
      { 'auth.local.email': emailRegex },
      { 'auth.facebook.emails.value': emailRegex },
      { 'auth.google.emails.value': emailRegex },
    ],
  },
  {
    _id: 1,
    apiToken: 1,
    auth: 1,
  }).exec();

  if (users.length < 1) {
    console.log(`No users found with email address ${email}`);
  } else {
    Promise.all(users.map(user => (async () => {
      await deleteAmplitudeData(user._id, email); // eslint-disable-line no-await-in-loop
      await deleteHabiticaData(user, email); // eslint-disable-line no-await-in-loop
    })()));
  }
}

function deleteUserData (emails) {
  const emailPromises = emails.map(processEmailAddress);
  return Promise.all(emailPromises);
}

module.exports = deleteUserData;