Implement GDPR data subject export endpoint with signed download links

[thlpkee20-wq]

Description

GDPR requires data subject export. Implement a request/processing/export pipeline that compiles user data into a portable archive with a signed download URL and short-lived access.

Requirements and context

• Must be secure, tested, and documented
• Should be efficient and easy to review
• Relevant code: src/db/repositories/userRepository.ts, src/routes/users.ts
• Download URLs must expire and be one-time-use

Suggested execution

• Fork the repo and create a branch
• git checkout -b feat/gdpr-export
• Implement changes
  • Add data_export_requests table and worker
  • Build archive with PII categorization
  • Add signed-URL endpoint with one-time consumption
• Validate security and correctness assumptions

Test and commit

• Run tests
  • npm test
• Cover edge cases
  • Reuse attempt, expiry race, partial archive failure
• Include test output and notes

Example commit message

feat: GDPR data subject export pipeline

Guidelines

• Minimum 95 percent test coverage
• Clear documentation
• Timeframe: 96 hours

[Elsa-tech2026]

@Elsa-tech2026 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I’m a full-stack and smart contract developer eager to learn and add value to this project. Please consider assigning this task to me!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Elsa-tech2026 to this issue.

[Fatimasanusi]

@Fatimasanusi has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Fatimasanusi to this issue.

[jacintaaugustine]

@jacintaaugustine has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

Hello, As a senior developer, i reviewed the issue, very conversant with it and I'd love to work on it immediately!.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @jacintaaugustine to this issue.