Method removeUser

src/FileRise/Domain/UserModel.php:338–439

* Remove a user and update encrypted userPermissions.json. */

($usernameToRemove)

     * Remove a user and update encrypted userPermissions.json.
     */
    public static function removeUser($usernameToRemove)
    {
        global $encryptionKey;

        if (!preg_match(REGEX_USER, $usernameToRemove)) {
            return ["error" => "Invalid username"];
        }

        $usersFile = USERS_DIR . USERS_FILE;
        if (!file_exists($usersFile)) {
            return ["error" => "Users file not found"];
        }

        $existingUsers = file($usersFile, FILE_IGNORE_NEW_LINES | FILE_SKIP_EMPTY_LINES) ?: [];
        $newUsers = [];
        $userFound = false;

        foreach ($existingUsers as $line) {
            $parts = explode(':', trim($line));
            if (count($parts) < 3) {
                continue;
            }
            if (strcasecmp($parts[0], $usernameToRemove) === 0) {
                $userFound = true;
                continue; // skip this user
            }
            $newUsers[] = $line;
        }

        if (!$userFound) {
            return ["error" => "User not found"];
        }

        $newContent = $newUsers ? (implode(PHP_EOL, $newUsers) . PHP_EOL) : '';
        if (file_put_contents($usersFile, $newContent, LOCK_EX) === false) {
            return ["error" => "Failed to update users file"];
        }

        if (class_exists(AuthModel::class) && method_exists(AuthModel::class, 'revokeRememberTokensForUser')) {
            AuthModel::revokeRememberTokensForUser($usernameToRemove);
        }

    // Update encrypted userPermissions.json — remove any key matching case-insensitively
        $permissionsFile = USERS_DIR . "userPermissions.json";
        if (file_exists($permissionsFile)) {
            $raw = file_get_contents($permissionsFile);
            $decrypted = decryptData($raw, $encryptionKey);
            $permissionsArray = $decrypted !== false
            ? json_decode($decrypted, true)
            : (json_decode($raw, true) ?: []); // tolerate legacy plaintext

            if (is_array($permissionsArray)) {
                foreach (array_keys($permissionsArray) as $k) {
                    if (strcasecmp($k, $usernameToRemove) === 0) {
                        unset($permissionsArray[$k]);
                    }
                }
                $plain = json_encode($permissionsArray, JSON_PRETTY_PRINT);