feat(auth): route delete-account avec confirmation par mot de passe (#73)

src/auth/routes.py

@@ -199,3 +199,19 @@ def confirm_email_change():
         return redirect("/compte/admin?error=invalid_token")
     db.promote_pending_email(user_id)
     return redirect("/compte/admin?email_changed=1")
+
+
+@auth_bp.route("/delete-account", methods=["POST"])
+@login_required
+def delete_account():
+    current_pw = request.form.get("current_password") or ""
+    row = db.get_user_by_id(current_user.id)
+    if not check_password_hash(row["password_hash"], current_pw):
+        return _redirect_with_error("/compte/admin", "invalid_current_password")
+
+    user_id = current_user.id
+    db.delete_email_verification_tokens_for_user(user_id)
+    db.delete_password_reset_tokens_for_user(user_id)
+    db.delete_user(user_id)
+    logout_user()
+    return redirect("/?account_deleted=1")

tests/auth/test_account.py

@@ -78,3 +78,25 @@ def test_change_password_mismatch(client, users_db_path):
         },
     )
     assert "error=password_mismatch" in resp.headers["Location"]
+
+
+def test_delete_account_requires_login(client, users_db_path):
+    resp = client.post("/auth/delete-account", data={"current_password": "x"})
+    assert resp.status_code in (302, 401)
+
+
+def test_delete_account_wrong_password(client, users_db_path):
+    uid = _login(client)
+    resp = client.post("/auth/delete-account", data={"current_password": "wrong"})
+    assert "error=invalid_current_password" in resp.headers["Location"]
+    assert db.get_user_by_id(uid) is not None
+
+
+def test_delete_account_success(client, users_db_path):
+    uid = _login(client)
+    resp = client.post(
+        "/auth/delete-account", data={"current_password": "old-password12"}
+    )
+    assert resp.status_code == 302
+    assert "account_deleted=1" in resp.headers["Location"]
+    assert db.get_user_by_id(uid) is None