HighPR-scopeJava

Portable DSAR export with signed URL and TTL

Provide an authenticated endpoint that assembles a user's data into a structured JSON export and returns a short-lived signed URL (≤24h). Include integration tests in the PR. (GDPR Art. 20)

Add to Mesrai Open workspace

Why this matters

Ensures data portability while minimizing exposure window.

Bad vs. good

Side-by-side examples engineers can pattern-match during review.

Avoid

@GetMapping("/gdpr/export")\npublic String exportCsv(@RequestParam String email){\n return \"we will email you\"; // no auth, no TTL\n}

Prefer

@GetMapping("/gdpr/export")\npublic ResponseEntity<ExportLink> export(){\n User u = auth.currentUser();\n URI url = storage.sign("exports/"+u.id()+".json", Duration.ofHours(24));\n return ResponseEntity.ok(new ExportLink(url));\n}

More snippets

Good

URI url = storage.sign(path, Duration.ofHours(24));

Bad

return ResponseEntity.ok(csvBody); // inline data, no TTL

Related rules

From the same buckets as this rule.

Critical
Idempotent Right to Erasure across all stores
Provide a single idempotency-keyed erasure workflow that scrubs PII in primary DB, caches, search indices, and object storage; emit an audit event with erasure_request_id. (GDPR Art. 17)
compliance-gdprprivacy-pii+2
High
Encrypt PII at rest using application-layer crypto
Encrypt sensitive columns (e.g., email, phone) with managed keys; ensure DB connection enforces TLS. Store only ciphertext; compare via deterministic token/hashes when needed. (GDPR Art. 32)
compliance-gdprsecurity-hardening+1
High
Enforce retention with explicit TTL per data category
PII tables must include an expires_at (or retention_policy) column and a scheduled deletion/archival job aligned to data category. No indefinite retention. (GDPR Art. 5(1)(e))
compliance-gdprprivacy-pii+2

Why this matters

Bad vs. good

More snippets

Related rules

Idempotent Right to Erasure across all stores

Encrypt PII at rest using application-layer crypto

Enforce retention with explicit TTL per data category

Why this matters

Bad vs. good

More snippets

Related rules

Idempotent Right to Erasure across all stores

Encrypt PII at rest using application-layer crypto

Enforce retention with explicit TTL per data category