signupprotection

type ClientIPResolver interface {
	Resolve(*http.Request) (netip.Addr, error)
}

type PasswordSignupAttempt struct {
	ClientIP       netip.Addr
	Email          string
	TurnstileToken string
}

type PasswordSignupProtection interface {
	Check(context.Context, PasswordSignupAttempt) *apperrors.ServiceError
}

type PasswordSignupProtectionSpec struct {
	Verifier      turnstile.Verifier
	IPThrottle    ThrottleSpec
	EmailThrottle ThrottleSpec
}

type ThrottleSpec struct {
	MaxTrackedKeys int
	MaxAttempts    int
	Window         time.Duration
	Now            func() time.Time
}