Herald
OpenapiUser

Self-service account deletion (soft-delete).

Requires an authenticated session (`inject_identity`). Anonymizes PII, marks the account `Deleted`, clears TOTP, cancels in-effect subscriptions, revokes all sessions (incl. the caller's), and records a `user.delete` audit event. One-time purchases are NOT refunded. Returns 204 on success — the caller's token is invalidated by the session wipe.

POST
/api/user/me/delete-account

Requires an authenticated session (inject_identity). Anonymizes PII, marks the account Deleted, clears TOTP, cancels in-effect subscriptions, revokes all sessions (incl. the caller's), and records a user.delete audit event. One-time purchases are NOT refunded. Returns 204 on success — the caller's token is invalidated by the session wipe.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

password*string

Current password — second-factor confirmation for this irreversible operation. bcrypt-verified against the account's stored hash.

Response Body

application/json

application/json

application/json

curl -X POST "https://example.com/api/user/me/delete-account" \  -H "Content-Type: application/json" \  -d '{    "password": "string"  }'
Empty
{  "code": "string",  "details": null,  "message": "string",  "requestId": "string",  "status": 0}
{  "code": "string",  "details": null,  "message": "string",  "requestId": "string",  "status": 0}
{  "code": "string",  "details": null,  "message": "string",  "requestId": "string",  "status": 0}