Method DeleteWorkspace

backend/api/v1/workspace_service.go:211–264

DeleteWorkspace soft-deletes a workspace. SaaS only. Cancels any active Stripe subscription before deleting, then switches to the next available workspace and returns new auth tokens.

(ctx context.Context, req *connect.Request[v1pb.DeleteWorkspaceRequest])

// Cancels any active Stripe subscription before deleting, then switches
// to the next available workspace and returns new auth tokens.
func (s *WorkspaceService) DeleteWorkspace(ctx context.Context, req *connect.Request[v1pb.DeleteWorkspaceRequest]) (*connect.Response[v1pb.LoginResponse], error) {
	if !s.profile.SaaS {
		return nil, connect.NewError(connect.CodeFailedPrecondition, errors.New("workspace deletion is only supported in SaaS mode"))
	}

	user, ok := GetUserFromContext(ctx)
	if !ok || user == nil {
		return nil, connect.NewError(connect.CodeUnauthenticated, errors.New("user not found"))
	}

	workspaceID, err := common.GetWorkspaceID(req.Msg.Name)
	if err != nil {
		return nil, connect.NewError(connect.CodeInvalidArgument, err)
	}
	if contextWorkspaceID := common.GetWorkspaceIDFromContext(ctx); workspaceID != contextWorkspaceID {
		return nil, connect.NewError(connect.CodePermissionDenied, errors.Errorf("cannot delete workspace %q from workspace %q", workspaceID, contextWorkspaceID))
	}

	// Cancel active Stripe subscription if any.
	sub, err := s.store.GetSubscriptionByWorkspace(ctx, workspaceID)
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, errors.Wrap(err, "failed to check subscription"))
	}
	if sub != nil && sub.Payload != nil && sub.Payload.StripeSubscriptionId != "" {
		if _, err := stripeplugin.CancelSubscription(sub.Payload.StripeSubscriptionId, workspaceID, true, "other", "Delete workspace"); err != nil {
			slog.Warn("failed to cancel Stripe subscription during workspace deletion",
				slog.String("workspace", workspaceID),
				log.BBError(err),
			)
		}
	}

	if err := s.store.DeleteWorkspace(ctx, workspaceID); err != nil {
		return nil, connect.NewError(connect.CodeInternal, errors.Wrap(err, "failed to delete workspace"))
	}

	// Find the next workspace and switch to it.
	nextWS, err := s.store.FindWorkspace(ctx, &store.FindWorkspaceMessage{
		Email: user.Email,
	})
	if err != nil {
		return nil, connect.NewError(connect.CodeInternal, errors.Wrap(err, "failed to find next workspace"))
	}
	if nextWS == nil {
		// No remaining workspace — clear auth cookies and return empty response.
		// Frontend redirects to login which will provision a new workspace.
		resp := connect.NewResponse(&v1pb.LoginResponse{})
		s.authService.clearSessionAndSetCookies(ctx, req.Header(), resp.Header(), workspaceID)
		return resp, nil
	}

	isWeb := auth.GetRefreshTokenFromCookie(req.Header()) != ""
	return s.authService.switchWorkspaceInternal(ctx, user, nextWS.ResourceID, isWeb, req.Header())
}

// LeaveWorkspace removes the calling user from a workspace's IAM bindings,
// then switches to the next available workspace.