Delete all posts by a user on entire site with API?

[45thj5ej]

How would I accomplish this? Can’t seem to really figure out what to do…

I’ve looked at:

Reverse engineer the Discourse API

Discourse is backed by a complete JSON api. Anything you can do on the site you can also do using the JSON api. The API is documented at docs.discourse.org. You can also use the discourse_api Ruby gem as a client library. However, not every endpoint is documented. To determine how to do something with the JSON API here are some steps you can follow. Example: recategorize a topic. Go to a topic and start editing a category: [image] Open Chrome dev tools, switch to the Network tab, select …

https://www.postman.com/api-evangelist/workspace/discourse/documentation/35240-c739e2a5-3ddf-4ffc-90e9-7dd579e8a55d?entity=request-35240-b041dc53-b653-4c46-b067-aee2b0a5cb46

but I don’t understand. The main thing I also don’t get is how to have each random ID gotten and then sent to be deleted since each ID is different…

[Lilly (Lillian)]

Lola, how does one delete all Discourse posts by a user using the API?

@Lola the Coding Assistant Bot

To delete all Discourse posts by a user through the API, follow these steps:

1. Get User Posts: Fetch the list of all posts by the user.
2. Delete Each Post: Iterate through the list and delete each post.

1. Get User Posts

Endpoint: GET /posts.json
Parameters: username: The username of the user.

curl -X GET "http://yourdiscourse.example.com/posts.json?username=targetUser" \
-H "Api-Key: your_api_key" \
-H "Api-Username: your_admin_username"

2. Delete Each Post

Endpoint: DELETE /posts/{id}.json

Loop through each post ID from step 1, and use the following command:

curl -X DELETE "http://yourdiscourse.example.com/posts/{post_id}.json" \
-H "Api-Key: your_api_key" \
-H "Api-Username: your_admin_username"

Replace {post_id} with the actual post ID.

Note: Ensure you have the necessary permissions and are aware of the implications of bulk deleting posts. This action cannot be undone.

[Lilly (Lillian)]

Btw I don’t believe there is a way to bulk delete via the API. I think you need to write a script to cycle through each post to delete. Depending on how many posts, rate limits could be an issue.

Lola, how do I write a script to bulk delete Discourse posts?

@Lola the Coding Assistant Bot

To accomplish batch processing for deleting Discourse posts, you can use a scripting language like Python. Below is an example script that demonstrates how to automate the deletion of posts for a specific user. This script:

1. Fetches posts by a specific user.
2. Iterates through the list of posts.
3. Deletes each post individually.

Example Python Script

import requests

# Configuration
discourse_base_url = 'http://yourdiscourse.example.com'
api_key = 'your_api_key'
api_username = 'your_admin_username'
target_username = 'targetUser'

# Headers for API requests
headers = {
    'Api-Key': api_key,
    'Api-Username': api_username
}

def get_user_posts(username):
    """Fetch posts by a specific user."""
    posts = []
    url = f'{discourse_base_url}/posts.json?username={username}'
    response = requests.get(url, headers=headers)
    if response.status_code == 200:
        posts_data = response.json()
        posts = posts_data.get('latest_posts', [])
    return posts

def delete_post(post_id):
    """Delete a specific post."""
    url = f'{discourse_base_url}/posts/{post_id}.json'
    response = requests.delete(url, headers=headers)
    return response.status_code == 200

def main():
    # Fetch user posts
    posts = get_user_posts(target_username)
    
    # Delete each post
    for post in posts:
        post_id = post.get('id')
        if delete_post(post_id):
            print(f'Successfully deleted post {post_id}')
        else:
            print(f'Failed to delete post {post_id}')

if __name__ == '__main__':
    main()

Explanation

• Configuration: Set your Discourse instance’s base URL, API key, API username, and the target username whose posts you want to delete.
• get_user_posts Function: Fetches posts by the specified user. Adjust the URL or parameters as needed based on your Discourse setup.
• delete_post Function: Deletes a post by its ID.
• main Function: Orchestrates the process by first fetching the user’s posts and then deleting each one.

Important Notes

• Rate Limits: Be mindful of Discourse’s API rate limits. If you’re deleting a large number of posts, consider adding delays between requests.
• Permissions: Ensure your API key has the necessary permissions to delete posts.
• Testing: Test the script in a safe environment before running it in production.

This script provides a basic framework. Depending on your specific needs, you might need to adjust the API endpoints, parameters, or add error handling and logging.

BTW, Why are you using API to do this?

I think it can also be done as a rake task from command line.

[45thj5ej]

Thank you, will try this out sometime today! So, can that rake stuff be done as a normal user? I would like this all to be done as a normal user who isn’t staff.

@Lilly

I think you need to write a script

This.

When I ran the python script below:

import requests
# Configuration
discourse_base_url = 'https://forums.mysite.me/'
api_key = 'eb4065d1dergrgh45h45h54h45reg4g70cbeb274bf7f87'
api_username = 'username'
target_username = 'targetusername'

# Headers for API requests
headers = {
    'eb4065d1dergrgh45h45h54h45reg4g70cbeb274bf7f87': api_key,
    'B': api_username
}

def get_user_posts(username):
    """Fetch posts by a specific user."""
    posts = []
    url = f'{discourse_base_url}/posts.json?username={username}'
    response = requests.get(url, headers=headers)
    if response.status_code == 200:
        posts_data = response.json()
        posts = posts_data.get('latest_posts', [])
    return posts

def delete_post(post_id):
    """Delete a specific post."""
    url = f'{discourse_base_url}/posts/{post_id}.json'
    response = requests.delete(url, headers=headers)
    return response.status_code == 200

def main():
    # Fetch user posts
    posts = get_user_posts(target_username)
    
    # Delete each post
    for post in posts:
        post_id = post.get('id')
        if delete_post(post_id):
            print(f'Successfully deleted post {post_id}')
        else:
            print(f'Failed to delete post {post_id}')

if __name__ == '__main__':
    main()

On my terminal/console, I get:

Failed to delete post 73
Failed to delete post 71
Failed to delete post 69
Failed to delete post 60
Failed to delete post 47

I tried 2 API keys I made. One with only me who can use it and one will all users. Both times, used the Global option. Same result.

[45thj5ej]

I’m sorry, but this made me audibly laugh. I needed that today this morning, haha.

[blake (Blake Erickson)]

@45thj5ej

I would like this all to be done as a normal user who isn’t staff.

That’s not going to work. Even for API requests. After a certain point users can’t delete their own posts.

Usually the best option is to anonymize all posts by a user if they no longer want to be apart of the forum. This will simply change their username to something random so that their posts are no longer associated with them.

[45thj5ej]

@Lilly Saw the reply ya deleted. So, what about making it work for myself or another Admin user? Not sure if ya saw, but I edited my above post to include the result I’m getting when using that script.

I guess same can be asked to you too, @blake, haha.

@blake

is to anonymize all posts by a user if they no longer want to be apart of the forum

This is just for testing atm.

[Lilly (Lillian)]

I deleted because Blake answered already.

[blake (Blake Erickson)]

@45thj5ej

but I edited my above post to include the result I’m getting when using that script.

You can try this curl request for your post id

curl -i -sS -X DELETE "http://localhost:4200/posts/<post-id>.json"  \
-H "Content-Type: multipart/form-data"  \
-H "Api-Key: key"  \
-H "Api-Username: username"

To see if it returns a different error but likely it will just say “An Error Occurred”

Looks like there are some site settings around users deleting posts that you can tweak. Also looks like there might be a “Delete all posts” button somewhere.

[45thj5ej]

Trying the curl command above:

curl -X GET "https://forums.mysite.me/posts.json?username=targetusername" \
-H "Api-Key: eb4065d56u7u6u65u54y54uy566575w4yer343434ac8a770cbeb274bf7f87" \
-H "Api-Username: AdminUsername"

So, it ran and fetched me the posts…but then I got this:

C:\Users\User>-H "Api-Key: eb4065d56u7u6u65u54y54uy566575w4yer343434ac8a770cbeb274bf7f87"
'-H' is not recognized as an internal or external command,
operable program or batch file.

C:\Users\User>-H "Api-Username: AdminUsername"
'-H' is not recognized as an internal or external command,
operable program or batch file.

Is this normal or why is that happening?

[blake (Blake Erickson)]

The curl command you entered is not the same as the one from above.

Looks like you are using the Windows cmd terminal, maybe it doesn’t like the \ separating lines. You can just remove them so it is all on one line.

[45thj5ej]

Tried it without the slashes already. Making it all one line fixed it, thanks!

@blake

The curl command you entered is not the same as the one from above.

Sorry, meant the one Lilly shared.

[blake (Blake Erickson)]

Looks like there is an endpoint to batch delete all posts for a user.

It’s triggered by this button on the users page from the admin dashboard

[45thj5ej]

@blake

curl -i -sS -X DELETE "http://localhost:4200/posts/<post-id>.json"  \
-H "Content-Type: multipart/form-data"  \
-H "Api-Key: key"  \
-H "Api-Username: username"

So, instead of manually having to enter a post-id (because at that point, I might as well go on the actual site and just hit the delete buttons, right?), how can that auto-get filled in for each post?

@blake

Looks like there is an endpoint to batch delete all posts for a user.

Oh, sweet! So I would just make the URL:
http://mysite.com/admin/users/79/delete_posts_batch ?
Or, what is the “79” here? a user ID I assume that you get when you go to the user’s profile?

[Arkshine]

@45thj5ej

Oh, sweet! So I would just make the URL:
http://mysite.com/admin/users/79/delete_posts_batch ?
Or, what is the “79” here? a user ID I assume that you get when you go to the user’s profile?

Yes, that’s the user’s ID, and it’s a PUT request. It returns the number of deleted posts.

[45thj5ej]

Oh, so I wouldn’t do?

curl -i -sS -X DELETE "http://forums.mysite.com/admin/users/0/delete_posts_batch"  \
-H "Content-Type: multipart/form-data"  \
-H "Api-Key: eb4065d45745678u564754y4545y545445674y34545y50cbeb274bf7f87" \
-H "Api-Username: AdminUsername"

[Arkshine]

Not DELETE but PUT request. Also, there are no form parameters here.

[supermathie (Michael Brown)]

If it’s an admin performing deleting, there’s an admin operation to Delete all posts for a user.

You might need to adjust other settings first to permit this (delete all posts max).

@45thj5ej

eb4065d45745678u564754y4545y545445674y34545y50cbeb274bf7f87

I certainly hope this isn’t the actual API key for your site. As previously noted, it’s pretty easy to figure out what your site actually is.

You should consider this key burned and rotate it.

[45thj5ej]

So just take that form line out completely?

EDIT: I kept the line in and just changed “DELETE” to “PUT” and it worked.

[discord_user1031 (Anila)]

@45thj5ej

pt the line in and just changed “DE

Delete posts using API is failing for me with 403 error with body {“errors”:[“You are not permitted to view the requested resource.”],“error_type”:“invalid_access”}

Any idea what the fix could be?