From 7bc19e8185666c7f6d62315f5c6516f7992b76cf Mon Sep 17 00:00:00 2001
From: Johannes Zellner <johannes@cloudron.io>
Date: Mon, 16 Feb 2026 13:52:04 +0100
Subject: [PATCH] Cleanup passkeys on user deletion

---
 src/users.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/users.js b/src/users.js
index a825bf681..2d07aa5f8 100644
--- a/src/users.js
+++ b/src/users.js
@@ -266,6 +266,7 @@ async function del(user, auditSource) {
         { query: 'DELETE FROM groupMembers WHERE userId = ?', args: [ user.id ] },
         { query: 'DELETE FROM tokens WHERE identifier = ?', args: [ user.id ] },
         { query: 'DELETE FROM appPasswords WHERE userId = ?', args: [ user.id ] },
+        { query: 'DELETE FROM passkeys WHERE userId = ?', args: [ user.id ] },
         { query: 'DELETE FROM users WHERE id = ?', args: [ user.id ] }, // keep this the last query as we check affectedRows below
     ];