perf: Optimise account deactivation process #1314

Merged
nex merged 4 commits from nex/feat/faster-deactivations into main 2026-01-30 05:11:31 +00:00
Owner

This pull request optimises the user deactivation process by removing all instances of duplicated work, and changes the process to as follows:

  1. Deactivate the user
  2. Remove global profile
  3. For each room the user is in, drop their power level if possible
  4. For each room the user is in, send a leave event with no profile
  5. Forget all rooms the user is in

This is opposed to the previous flow:

  1. Remove the user's avatar from all rooms
  2. Remove the user's display name from all rooms
  3. Deactivate the user
  4. Remove the user's display name from all rooms (no-op)
  5. Remove the user's avatar from all rooms (no-op)
  6. Remove users' global profile
  7. Drop power levels in each room
  8. Leave each room
  9. Forget each room

I plan to add a way to honour erase requests and also add a way for admins to force the user to rescind all of their invites and redact all of their messages, but that will require database changes which makes that out of scope for this PR.

Pull request checklist:

  • This pull request targets the main branch, and the branch is named something other than
    main.
  • I have written an appropriate pull request title and my description is clear.
  • I understand I am responsible for the contents of this pull request.
  • I have followed the contributing guidelines:
<!-- In order to help reviewers know what your pull request does at a glance, you should ensure that 1. Your PR title is a short, single sentence describing what you changed 2. You have described in more detail what you have changed, why you have changed it, what the intended effect is, and why you think this will be beneficial to the project. If you have made any potentially strange/questionable design choices, but didn't feel they'd benefit from code comments, please don't mention them here - after opening your pull request, go to "files changed", and click on the "+" symbol in the line number gutter, and attach comments to the lines that you think would benefit from some clarification. --> This pull request optimises the user deactivation process by removing all instances of duplicated work, and changes the process to as follows: 1. Deactivate the user 2. Remove global profile 3. For each room the user is in, drop their power level if possible 4. For each room the user is in, send a leave event with no profile 5. Forget all rooms the user is in This is opposed to the previous flow: 1. Remove the user's avatar from all rooms 2. Remove the user's display name from all rooms 3. Deactivate the user 4. Remove the user's display name from all rooms (no-op) 5. Remove the user's avatar from all rooms (no-op) 6. Remove users' global profile 7. Drop power levels in each room 8. Leave each room 9. Forget each room I plan to add a way to honour erase requests and also add a way for admins to force the user to rescind all of their invites and redact all of their messages, but that will require database changes which makes that out of scope for this PR. <!-- Example: This pull request allows us to warp through time and space ten times faster than before by double-inverting the warp drive with hyperheated jump fluid, both making the drive faster and more efficient. This resolves the common issue where we have to wait more than 10 milliseconds to engage, use, and disengage the warp drive when travelling between galaxies. --> <!-- Closes: #... --> <!-- Fixes: #... --> <!-- Uncomment the above line(s) if your pull request fixes an issue or closes another pull request by superseding it. Replace `#...` with the issue/pr number, such as `#123`. --> **Pull request checklist:** <!-- You need to complete these before your PR can be considered. If you aren't sure about some, feel free to ask for clarification in #dev:continuwuity.org. --> - [x] This pull request targets the `main` branch, and the branch is named something other than `main`. - [x] I have written an appropriate pull request title and my description is clear. - [x] I understand I am responsible for the contents of this pull request. - I have followed the [contributing guidelines][c1]: - [x] My contribution follows the [code style][c2], if applicable. - [x] I ran [pre-commit checks][c1pc] before opening/drafting this pull request. - [x] I have [tested my contribution][c1t] (or proof-read it for documentation-only changes) myself, if applicable. This includes ensuring code compiles. - [x] My commit messages follow the [commit message format][c1cm] and are descriptive. - [x] I have written a [news fragment][n1] for this PR, if applicable<!--(can be done after hitting open!)-->. <!-- Notes on these requirements: - While not required, we encourage you to sign your commits with GPG or SSH to attest the authenticity of your changes. - While we allow LLM-assisted contributions, we do not appreciate contributions that are low quality, which is typical of machine-generated contributions that have not had a lot of love and care from a human. Please do not open a PR if all you have done is asked ChatGPT to tidy up the codebase with a +-100,000 diff. - In the case of code style violations, reviewers may leave review comments/change requests indicating what the ideal change would look like. For example, a reviewer may suggest you lower a log level, or use `match` instead of `if/else` etc. - In the case of code style violations, pre-commit check failures, minor things like typos/spelling errors, and in some cases commit format violations, reviewers may modify your branch directly, typically by making changes and adding a commit. Particularly in the latter case, a reviewer may rebase your commits to squash "spammy" ones (like "fix", "fix", "actually fix"), and reword commit messages that don't satisfy the format. - Pull requests MUST pass the `Checks` CI workflows to be capable of being merged. This can only be bypassed in exceptional circumstances. If your CI flakes, let us know in matrix:r/dev:continuwuity.org. - Pull requests have to be based on the latest `main` commit before being merged. If the main branch changes while you're making your changes, you should make sure you rebase on main before opening a PR. Your branch will be rebased on main before it is merged if it has fallen behind. - We typically only do fast-forward merges, so your entire commit log will be included. Once in main, it's difficult to get out cleanly, so put on your best dress, smile for the cameras! --> [c1]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md [c2]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/docs/development/code_style.mdx [c1pc]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#pre-commit-checks [c1t]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#running-tests-locally [c1cm]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#commit-messages [n1]: https://towncrier.readthedocs.io/en/stable/tutorial.html#creating-news-fragments
nex added this to the 0.5.5 milestone 2026-01-25 15:47:50 +00:00
nex requested review from Owners 2026-01-25 16:39:59 +00:00
Author
Owner

Obviously I'm not willing to test this with a huge account but I gave it a quick burn test on timedout.uk and it's noticeably faster than before.

Obviously I'm not willing to test this with a huge account but I gave it a quick burn test on timedout.uk and it's noticeably faster than before.
@ -824,4 +822,1 @@
info!("User {sender_user} deactivated their account.");
if services.server.config.admin_room_notices {
Owner

Not sending notices on deactivation to the admin room anymore?

Not sending notices on deactivation to the admin room anymore?
Author
Owner

I think I meant to send that notice in full_user_deactivate but cut it and forgot to paste it later

I think I meant to send that notice in `full_user_deactivate` but cut it and forgot to paste it later
nex marked this conversation as resolved
@ -920,3 +906,2 @@
for room_id in all_joined_rooms {
let state_lock = services.rooms.state.mutex.lock(room_id).await;
// TODO: Rescind all user invites
Owner

I assume this isn't done because we can't revoke invites over federation yet

I assume this isn't done because we can't revoke invites over federation yet
Author
Owner

No, it's because we don't have the useridroomid_eventid column I want, so finding every invite event sent by the sender will require scanning potentially an unbounded number of events in the database to discover them.

Adding that column later will also allow me to tackle the server-side component of redact-on ban, implement user redactions, and allow for redact-on-deactivate functionality too. But it's too much for a PR that just improves performance.

No, it's because we don't have the `useridroomid_eventid` column I want, so finding every invite event sent by the sender will require scanning potentially an unbounded number of events in the database to discover them. Adding that column later will also allow me to tackle the server-side component of redact-on ban, implement user redactions, and allow for redact-on-deactivate functionality too. But it's too much for a PR that just improves performance.
ginger marked this conversation as resolved
@ -974,1 +962,3 @@
super::leave_all_rooms(services, user_id).boxed().await;
super::update_all_rooms(services, pdu_queue, user_id).await;
for room_id in all_joined_rooms {
services.rooms.state_cache.forget(room_id, user_id);
Owner

What does "forget" mean here, exactly?

What does "forget" mean here, exactly?
Author
Owner

Makes the homeserver "forget" when the user left the room - https://spec.matrix.org/v1.17/client-server-api/#post_matrixclientv3roomsroomidforget.
Just a cache cleanup operation

Makes the homeserver "forget" when the user left the room - https://spec.matrix.org/v1.17/client-server-api/#post_matrixclientv3roomsroomidforget. Just a cache cleanup operation
ginger marked this conversation as resolved
ginger force-pushed nex/feat/faster-deactivations from 9d48d83756
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Successful in 1m30s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m52s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 10m17s
to c193ca2f0e
Some checks failed
Documentation / Build and Deploy Documentation (pull_request) Successful in 2m17s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 2m9s
Checks / Prek / Clippy and Cargo Tests (pull_request) Has been cancelled
2026-01-27 02:48:03 +00:00
Compare
fix: Restore admin room announcement for deactivations
All checks were successful
Documentation / Build and Deploy Documentation (pull_request) Successful in 2m23s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 3m10s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 50m13s
f07f0d3ded
nex requested review from ginger 2026-01-27 03:39:47 +00:00
ginger approved these changes 2026-01-29 15:57:11 +00:00
nex merged commit fd9bbb08ed into main 2026-01-30 05:11:31 +00:00
nex deleted branch nex/feat/faster-deactivations 2026-01-30 05:11:31 +00:00
nex modified the milestone from 0.5.5 to 0.5.4 2026-02-08 16:14:30 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
continuwuation/continuwuity!1314
No description provided.