OAuth tokens aren't removed on account deletion

S

stromb0li

Well-known member
Licensed customer
Affected version
2.3.10
It looks like oauth tokens aren't cleaned up during account deletion.

The User entity's _postDelete() doesn't seem to invoke cleanup on these tables, nor do I see anything in DeleteCleanUpService.php

Tables in question:
  • xf_api_login_token
  • xf_oauth_token
  • xf_oauth_request
  • xf_oauth_refresh_token
 
Last edited:
Back
Top Bottom