From c9054b64579cbd14a95498fb3d844cd343dc590a Mon Sep 17 00:00:00 2001
From: HichemTab-tech <konanhichemsinshi@gmail.com>
Date: Thu, 18 Sep 2025 18:23:58 +0100
Subject: [PATCH 1/3] Remove unused password input and related error handling
 in DeleteUser component.

---
 resources/js/components/delete-user.tsx | 19 +------------------
 1 file changed, 1 insertion(+), 18 deletions(-)

diff --git a/resources/js/components/delete-user.tsx b/resources/js/components/delete-user.tsx
index 7c4b73a..fa03993 100644
--- a/resources/js/components/delete-user.tsx
+++ b/resources/js/components/delete-user.tsx
@@ -40,25 +40,8 @@ export default function DeleteUser() {
                             resetOnSuccess
                             className="space-y-6"
                         >
-                            {({ resetAndClearErrors, processing, errors }) => (
+                            {({ resetAndClearErrors, processing }) => (
                                 <>
-                                    <div className="grid gap-2">
-                                        <Label htmlFor="password" className="sr-only">
-                                            Password
-                                        </Label>
-
-                                        <Input
-                                            id="password"
-                                            type="password"
-                                            name="password"
-                                            ref={passwordInput}
-                                            placeholder="Password"
-                                            autoComplete="current-password"
-                                        />
-
-                                        <InputError message={errors.password} />
-                                    </div>
-
                                     <DialogFooter className="gap-2">
                                         <DialogClose asChild>
                                             <Button variant="secondary" onClick={() => resetAndClearErrors()}>

From 58a382fd28446f24de25c1a67b6f3d70b8771e59 Mon Sep 17 00:00:00 2001
From: HichemTab-tech <konanhichemsinshi@gmail.com>
Date: Thu, 18 Sep 2025 18:24:31 +0100
Subject: [PATCH 2/3] Add cascade delete for user-link relations in migrations

---
 ...delete_cascade_for_user_link_relations.php | 68 +++++++++++++++++++
 1 file changed, 68 insertions(+)
 create mode 100644 database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php

diff --git a/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php b/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php
new file mode 100644
index 0000000..6fac061
--- /dev/null
+++ b/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php
@@ -0,0 +1,68 @@
+<?php
+
+use Illuminate\Database\Migrations\Migration;
+use Illuminate\Database\Schema\Blueprint;
+use Illuminate\Support\Facades\Schema;
+
+return new class extends Migration
+{
+    /**
+     * Run the migrations.
+     */
+    public function up(): void
+    {
+        Schema::table('links', function (Blueprint $table) {
+            $table->dropForeign(['submitted_by_user_id']);
+            $table->foreign('submitted_by_user_id')->references('id')->on('users')->onDelete('cascade');
+        });
+
+        Schema::table('user_links', function (Blueprint $table) {
+            $table->dropForeign(['user_id']);
+            $table->dropForeign(['link_id']);
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->foreign('link_id')->references('id')->on('links')->onDelete('cascade');
+        });
+
+        Schema::table('link_notes', function (Blueprint $table) {
+            $table->dropForeign(['user_id']);
+            $table->dropForeign(['link_id']);
+            $table->foreign('user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->foreign('link_id')->references('id')->on('links')->onDelete('cascade');
+        });
+
+        Schema::table('user_statuses', function (Blueprint $table) {
+            $table->dropForeign(['link_id']);
+            $table->foreign('link_id')->references('id')->on('links')->onDelete('cascade');
+        });
+    }
+
+    /**
+     * Reverse the migrations.
+     */
+    public function down(): void
+    {
+        Schema::table('links', function (Blueprint $table) {
+            $table->dropForeign(['submitted_by_user_id']);
+            $table->foreign('submitted_by_user_id')->references('id')->on('users');
+        });
+
+        Schema::table('user_links', function (Blueprint $table) {
+            $table->dropForeign(['user_id']);
+            $table->dropForeign(['link_id']);
+            $table->foreign('user_id')->references('id')->on('users');
+            $table->foreign('link_id')->references('id')->on('links');
+        });
+
+        Schema::table('link_notes', function (Blueprint $table) {
+            $table->dropForeign(['user_id']);
+            $table->dropForeign(['link_id']);
+            $table->foreign('user_id')->references('id')->on('users');
+            $table->foreign('link_id')->references('id')->on('links');
+        });
+
+        Schema::table('user_statuses', function (Blueprint $table) {
+            $table->dropForeign(['link_id']);
+            $table->foreign('link_id')->references('id')->on('links')->onDelete('set null');
+        });
+    }
+};

From 51016b70a9c60e2ae746c91e6c0f993fd9bd675f Mon Sep 17 00:00:00 2001
From: Ashley Hindle <hey@ashleyhindle.com>
Date: Fri, 19 Sep 2025 08:25:25 +0100
Subject: [PATCH 3/3] feat: change link deletion to anonymization so bookmarks
 aren't lost

Add test
---
 app/Actions/GetRecentLinks.php                |   2 +-
 ...delete_cascade_for_user_link_relations.php |   4 +-
 .../Settings/UserAccountDeletionTest.php      | 177 ++++++++++++++++++
 3 files changed, 181 insertions(+), 2 deletions(-)
 create mode 100644 tests/Feature/Settings/UserAccountDeletionTest.php

diff --git a/app/Actions/GetRecentLinks.php b/app/Actions/GetRecentLinks.php
index 0f11e85..5a79392 100644
--- a/app/Actions/GetRecentLinks.php
+++ b/app/Actions/GetRecentLinks.php
@@ -24,7 +24,7 @@ public function handle(int $limit = 10): array
                     'title' => $link->title,
                     'description' => $link->description,
                     'category' => $link->category->value,
-                    'submitted_by' => $link->submittedBy->name,
+                    'submitted_by' => $link->submittedBy?->name ?? 'Anonymous',
                     'created_at' => $link->created_at->diffForHumans(),
                 ];
             });
diff --git a/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php b/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php
index 6fac061..916375d 100644
--- a/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php
+++ b/database/migrations/2025_09_18_171819_add_delete_cascade_for_user_link_relations.php
@@ -13,7 +13,8 @@ public function up(): void
     {
         Schema::table('links', function (Blueprint $table) {
             $table->dropForeign(['submitted_by_user_id']);
-            $table->foreign('submitted_by_user_id')->references('id')->on('users')->onDelete('cascade');
+            $table->unsignedBigInteger('submitted_by_user_id')->nullable()->change();
+            $table->foreign('submitted_by_user_id')->references('id')->on('users')->onDelete('set null');
         });
 
         Schema::table('user_links', function (Blueprint $table) {
@@ -43,6 +44,7 @@ public function down(): void
     {
         Schema::table('links', function (Blueprint $table) {
             $table->dropForeign(['submitted_by_user_id']);
+            $table->unsignedBigInteger('submitted_by_user_id')->nullable(false)->change();
             $table->foreign('submitted_by_user_id')->references('id')->on('users');
         });
 
diff --git a/tests/Feature/Settings/UserAccountDeletionTest.php b/tests/Feature/Settings/UserAccountDeletionTest.php
new file mode 100644
index 0000000..90095c9
--- /dev/null
+++ b/tests/Feature/Settings/UserAccountDeletionTest.php
@@ -0,0 +1,177 @@
+<?php
+
+declare(strict_types=1);
+
+use App\Models\Link;
+use App\Models\LinkNote;
+use App\Models\User;
+use App\Models\UserLink;
+use App\Models\UserStatus;
+
+it('deletes user account and cascades all related data', function () {
+    // Arrange
+    $userToDelete = User::factory()->create();
+    $otherUser = User::factory()->create();
+
+    $userLinks = Link::factory()->count(3)->create([
+        'submitted_by_user_id' => $userToDelete->id,
+    ]);
+
+    $otherUserLinks = Link::factory()->count(2)->create([
+        'submitted_by_user_id' => $otherUser->id,
+    ]);
+
+    $savedLinks = collect();
+    foreach ($userLinks->take(3) as $link) {
+        $savedLinks->push(UserLink::factory()->create([
+            'user_id' => $userToDelete->id,
+            'link_id' => $link->id,
+        ]));
+    }
+
+    // Create user_links for other user (should not be deleted)
+    $otherSavedLinks = collect();
+    foreach ($otherUserLinks->take(2) as $link) {
+        $otherSavedLinks->push(UserLink::factory()->create([
+            'user_id' => $otherUser->id,
+            'link_id' => $link->id,
+        ]));
+    }
+
+    $userNotes = LinkNote::factory()->count(5)->create([
+        'user_id' => $userToDelete->id,
+        'link_id' => $userLinks->random()->id,
+    ]);
+
+    $otherUserNotes = LinkNote::factory()->count(2)->create([
+        'user_id' => $otherUser->id,
+        'link_id' => $otherUserLinks->first()->id,
+    ]);
+
+    $userStatus = UserStatus::factory()->create([
+        'user_id' => $userToDelete->id,
+        'link_id' => $userLinks->first()->id,
+    ]);
+
+    // Create user status for other user (should not be deleted)
+    $otherUserStatus = UserStatus::factory()->create([
+        'user_id' => $otherUser->id,
+        'link_id' => $otherUserLinks->first()->id,
+    ]);
+
+    // Record the IDs for later assertions
+    $userToDeleteId = $userToDelete->id;
+    $userLinkIds = $userLinks->pluck('id')->toArray();
+    $savedLinkIds = $savedLinks->pluck('id')->toArray();
+    $userNoteIds = $userNotes->pluck('id')->toArray();
+    $userStatusId = $userStatus->id;
+
+    // Act
+    $response = $this->actingAs($userToDelete)->delete(route('profile.destroy'));
+
+    // Assert
+    $response->assertRedirect('/');
+    $this->assertDatabaseMissing('users', ['id' => $userToDeleteId]);
+
+    foreach ($userLinkIds as $linkId) {
+        $this->assertDatabaseHas('links', ['id' => $linkId, 'submitted_by_user_id' => null]);
+    }
+
+    foreach ($savedLinkIds as $savedLinkId) {
+        $this->assertDatabaseMissing('user_links', ['id' => $savedLinkId]);
+    }
+
+    foreach ($userNoteIds as $noteId) {
+        $this->assertDatabaseMissing('link_notes', ['id' => $noteId]);
+    }
+
+    $this->assertDatabaseMissing('user_statuses', ['id' => $userStatusId]);
+    $this->assertDatabaseHas('users', ['id' => $otherUser->id]);
+
+    foreach ($otherUserLinks as $link) {
+        $this->assertDatabaseHas('links', ['id' => $link->id]);
+    }
+
+    foreach ($otherSavedLinks as $savedLink) {
+        $this->assertDatabaseHas('user_links', ['id' => $savedLink->id]);
+    }
+
+    foreach ($otherUserNotes as $note) {
+        $this->assertDatabaseHas('link_notes', ['id' => $note->id]);
+    }
+
+    $this->assertDatabaseHas('user_statuses', ['id' => $otherUserStatus->id]);
+
+    $this->assertGuest();
+});
+
+it('handles deletion when user has no related data', function () {
+    $user = User::factory()->create();
+    $userId = $user->id;
+
+    $response = $this->actingAs($user)->delete(route('profile.destroy'));
+
+    $response->assertRedirect('/');
+    $this->assertDatabaseMissing('users', ['id' => $userId]);
+    $this->assertGuest();
+});
+
+it('anonymizes links when user deletes account, preserving other users bookmarks', function () {
+    // This tests a complex scenario where:
+    // User A creates a link
+    // User B saves that link (creates user_link)
+    // User A deletes their account
+    // The link should be anonymized (submitted_by_user_id set to null), and User B keeps their bookmark
+
+    $userA = User::factory()->create();
+    $userB = User::factory()->create();
+
+    // User A creates a link
+    $link = Link::factory()->create([
+        'submitted_by_user_id' => $userA->id,
+    ]);
+
+    // User B saves User A's link
+    $userBSavedLink = UserLink::factory()->create([
+        'user_id' => $userB->id,
+        'link_id' => $link->id,
+    ]);
+
+    // User B adds a note to User A's link
+    $userBNote = LinkNote::factory()->create([
+        'user_id' => $userB->id,
+        'link_id' => $link->id,
+    ]);
+
+    // User B sets their status with User A's link
+    $userBStatus = UserStatus::factory()->create([
+        'user_id' => $userB->id,
+        'link_id' => $link->id,
+    ]);
+
+    $linkId = $link->id;
+    $userBSavedLinkId = $userBSavedLink->id;
+    $userBNoteId = $userBNote->id;
+    $userBStatusId = $userBStatus->id;
+
+    // User A deletes their account
+    $this->actingAs($userA)->delete(route('profile.destroy'));
+
+    // Assert User A is deleted
+    $this->assertDatabaseMissing('users', ['id' => $userA->id]);
+
+    // Assert the link is anonymized (submitted_by_user_id set to null)
+    $this->assertDatabaseHas('links', ['id' => $linkId, 'submitted_by_user_id' => null]);
+
+    // Assert User B's saved link is preserved
+    $this->assertDatabaseHas('user_links', ['id' => $userBSavedLinkId]);
+
+    // Assert User B's note on that link is preserved
+    $this->assertDatabaseHas('link_notes', ['id' => $userBNoteId]);
+
+    // Assert User B's status referencing that link is preserved
+    $this->assertDatabaseHas('user_statuses', ['id' => $userBStatusId]);
+
+    // Assert User B still exists
+    $this->assertDatabaseHas('users', ['id' => $userB->id]);
+});