Compliance (#19)

* fat: compliance docs

* fix: update wording

* feat: delete profile

* fix: upgrade to modal

* feat: completion of delete feature

* fix: address review comment on privacy.md regarding typo

* fix: address review comment on vite.config.ts regarding __dirname

* perf: address review comment on .tsx by lazy loading markdown dependencies

* fix: address review comment on main.rs regarding missing discord_login in OpenAPI paths

* fix: address review comment on ConfirmationModal.tsx regarding design-system mismatch

* fix: address review comment on cookies.md regarding auth token storage

* fix: address second round of review comments on PR #19

* fix: address remaining PR comments

* fix: playwright in CI

* ci: add pepper

* fix: address review comment on vite.config.ts regarding command injection

* fix: address review comments on terminology and privacy policy accuracy

* fix: address review comment on home.lazy.tsx regarding modal closure

* docs: address review comment on .env.example regarding IDENTITY_HASH_PEPPER

Author: Scetrov

.env.example

@@ -15,6 +15,11 @@ DISCORD_REDIRECT_URI=http://localhost:5038/api/auth/discord/callback
 # Generate a strong random secret (e.g., openssl rand -base64 32)
 JWT_SECRET=your_jwt_secret_minimum_32_characters
 
+# Secret pepper for hashing denylisted identifiers.
+# Generate a strong random string (e.g., openssl rand -base64 32)
+# Since state.rs uses .expect() this is REQUIRED for the backend to start.
+IDENTITY_HASH_PEPPER=your_random_pepper_string
+
 # Frontend URL for CORS and redirects
 FRONTEND_URL=http://localhost:5173
 

.github/workflows/ci.yml

@@ -30,6 +30,7 @@ jobs:
     env:
       SCCACHE_GHA_ENABLED: "true"
       RUSTC_WRAPPER: "sccache"
+      IDENTITY_HASH_PEPPER: ci-test-pepper
     steps:
       - name: Free Disk Space (Ubuntu)
         uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be
@@ -242,6 +243,7 @@ jobs:
           DATABASE_URL: "sqlite::memory:"
           JWT_SECRET: ci-test-secret
           FRONTEND_URL: http://localhost:4173
+          IDENTITY_HASH_PEPPER: ci-test-pepper
 
       - name: Upload blob report
         uses: actions/upload-artifact@v6

src/backend/Cargo.lock

@@ -33,3 +33,5 @@ utoipa = { version = "5.4.0", features = ["axum_extras", "uuid", "chrono"] }
 utoipa-scalar = { version = "0.3.0", features = ["axum"] }
 utoipa-swagger-ui = { version = "9.0.2", features = ["axum"] }
 bcrypt = "0.18.0"
+sha2 = "0.10.8"
+hex = "0.4.3"

src/backend/Cargo.toml

@@ -0,0 +1,8 @@
+-- Table to store hashed identifiers of deleted accounts to prevent circumvention
+CREATE TABLE IF NOT EXISTS identity_hashes (
+    hash TEXT PRIMARY KEY,
+    type TEXT NOT NULL, -- 'DISCORD' or 'WALLET'
+    created_at DATETIME DEFAULT CURRENT_TIMESTAMP
+);
+
+CREATE INDEX IF NOT EXISTS idx_identity_hashes_type ON identity_hashes(type);

src/backend/migrations/06_add_identity_hashes.sql

@@ -23,6 +23,7 @@ pub enum AuditAction {
     SuperAdminCreateTribe,
     SuperAdminUpdateTribe,
     SuperAdminDeleteWallet,
+    DeleteUser,
 }
 
 impl AuditAction {
@@ -45,6 +46,7 @@ impl AuditAction {
             AuditAction::SuperAdminCreateTribe => "SUPER_ADMIN_CREATE_TRIBE",
             AuditAction::SuperAdminUpdateTribe => "SUPER_ADMIN_UPDATE_TRIBE",
             AuditAction::SuperAdminDeleteWallet => "SUPER_ADMIN_DELETE_WALLET",
+            AuditAction::DeleteUser => "DELETE_USER",
         }
     }
 }