serviceemail

type AccountGateway ¶

type AccountGateway interface {
	// FindByEmail resolves the account currently bound to email.
	FindByEmail(ctx *gst.ServiceContext, email string) (*AccountSnapshot, error)

	// GetByID loads a stable account snapshot by account ID.
	GetByID(ctx *gst.ServiceContext, userID string) (*AccountSnapshot, error)

	// VerifyPassword validates the current password for the account.
	VerifyPassword(ctx *gst.ServiceContext, userID, password string) error

	// UpdatePassword persists a new password according to the host password policy.
	UpdatePassword(ctx *gst.ServiceContext, userID, newPassword string) error

	// MarkEmailVerified persists the email verification state for the account.
	MarkEmailVerified(ctx *gst.ServiceContext, userID string, verifiedAt time.Time) error

	// ApplyEmailChange persists a confirmed email change for the account.
	ApplyEmailChange(ctx *gst.ServiceContext, userID, newEmail string, changedAt time.Time) error

	// InvalidateSessions revokes cached sessions for an account after password reset.
	//
	// It takes the request context like every other method here, so the revoke
	// it performs is attributed to the request that caused it rather than
	// appearing as unowned background work in traces.
	InvalidateSessions(ctx *gst.ServiceContext, userID string)
}

AccountGateway connects the email module to the host application's account system. Implementations own account lookup, password verification, password hashing, account updates, and session invalidation for their account store.

The email service intentionally depends only on this gateway and AccountSnapshot so copied email module code does not import a concrete IAM user model.

type AccountSnapshot ¶

type AccountSnapshot struct {
	ID            string
	Email         string
	Active        bool
	EmailVerified bool
}

AccountSnapshot is the minimal account state required by email flows. ID must be the same stable account identifier stored in email flow state. Active must be true only when the host account is allowed to start or complete email flows.

type ChangeCancelService ¶

type ChangeCancelService struct {
	service.Base[*modelemail.ChangeCancel, *modelemail.ChangeCancelReq, *modelemail.ChangeCancelRsp]
}

ChangeCancelService handles the token cancellation step that revokes a pending email change before confirmation happens.

func (s *ChangeCancelService) Create(ctx *gst.ServiceContext, req *modelemail.ChangeCancelReq) (rsp *modelemail.ChangeCancelRsp, err error)

type ChangeConfirmService ¶

type ChangeConfirmService struct {
	service.Base[*modelemail.ChangeConfirm, *modelemail.ChangeConfirmReq, *modelemail.ChangeConfirmRsp]
}

ChangeConfirmService handles the token confirmation step that finalizes a pending email change.

func (s *ChangeConfirmService) Create(ctx *gst.ServiceContext, req *modelemail.ChangeConfirmReq) (rsp *modelemail.ChangeConfirmRsp, err error)

type ChangeRequestService ¶

type ChangeRequestService struct {
	service.Base[*modelemail.ChangeRequest, *modelemail.ChangeRequestReq, *modelemail.ChangeRequestRsp]
}

ChangeRequestService handles authenticated requests that start the email change flow for the current account.

func (s *ChangeRequestService) Create(ctx *gst.ServiceContext, req *modelemail.ChangeRequestReq) (rsp *modelemail.ChangeRequestRsp, err error)

type ChangeResendService ¶

type ChangeResendService struct {
	service.Base[*modelemail.ChangeResend, *modelemail.ChangeResendReq, *modelemail.ChangeResendRsp]
}

ChangeResendService handles authenticated requests that resend confirmation emails for an in-progress email change flow.

func (s *ChangeResendService) Create(ctx *gst.ServiceContext, req *modelemail.ChangeResendReq) (rsp *modelemail.ChangeResendRsp, err error)

type PasswordResetConfirmService ¶

type PasswordResetConfirmService struct {
	service.Base[*modelemail.PasswordResetConfirm, *modelemail.PasswordResetConfirmReq, *modelemail.PasswordResetConfirmRsp]
}

PasswordResetConfirmService handles the token confirmation step that finalizes the email-driven password reset flow.

func (s *PasswordResetConfirmService) Create(ctx *gst.ServiceContext, req *modelemail.PasswordResetConfirmReq) (rsp *modelemail.PasswordResetConfirmRsp, err error)

type PasswordResetRequestService ¶

type PasswordResetRequestService struct {
	service.Base[*modelemail.PasswordResetRequest, *modelemail.PasswordResetRequestReq, *modelemail.PasswordResetRequestRsp]
}

PasswordResetRequestService handles public password reset requests that start the email-driven password recovery flow.

func (s *PasswordResetRequestService) Create(ctx *gst.ServiceContext, req *modelemail.PasswordResetRequestReq) (rsp *modelemail.PasswordResetRequestRsp, err error)

type VerificationConfirmService ¶

type VerificationConfirmService struct {
	service.Base[*model.Empty, *modelemail.VerificationConfirmReq, *modelemail.VerificationConfirmRsp]
}

VerificationConfirmService handles the token confirmation step that finalizes the email verification flow.

func (s *VerificationConfirmService) Create(ctx *gst.ServiceContext, req *modelemail.VerificationConfirmReq) (rsp *modelemail.VerificationConfirmRsp, err error)

type VerificationRequestService ¶

type VerificationRequestService struct {
	service.Base[*model.Empty, *modelemail.VerificationRequestReq, *modelemail.VerificationRequestRsp]
}

VerificationRequestService handles public requests that start the email verification flow for an eligible user account.

func (s *VerificationRequestService) Create(ctx *gst.ServiceContext, req *modelemail.VerificationRequestReq) (rsp *modelemail.VerificationRequestRsp, err error)

type VerificationResendService ¶

type VerificationResendService struct {
	service.Base[*model.Empty, *modelemail.VerificationResendReq, *modelemail.VerificationResendRsp]
}

VerificationResendService handles public requests that resend verification emails for accounts that are still pending verification.

func (s *VerificationResendService) Create(ctx *gst.ServiceContext, req *modelemail.VerificationResendReq) (rsp *modelemail.VerificationResendRsp, err error)