identity

type APIFeature ¶

type APIFeature interface {
	Feature
	APIRoutes(r chi.Router, g RouteGroups)
}

APIFeature mounts endpoints inside the shared /api group.

type AuditEvent ¶

type AuditEvent struct {
	Action string
	Actor  string
	Target string
}

type Feature ¶

type Feature interface {
	Name() string
}

Feature is one mounted unit inside the identity surface: a feature left out of New has no routes.

type MFAPendingIssuer ¶

type MFAPendingIssuer interface {
	// RequiresPending reports whether the account must pass the
	// second factor before a full session.
	RequiresPending(ctx context.Context, userID string) (bool, error)
	// CreatePending mints the short-lived pending bridge and returns
	// its raw token (for the pending cookie only). remember carries
	// the sign-in duration request across the second factor, so the
	// session issued after verification keeps the requested lifetime.
	CreatePending(ctx context.Context, userID string, remember bool) (string, error)
	// ClearPending drops the bridge (sign-out).
	ClearPending(ctx context.Context, userID string) error
}

MFAPendingIssuer is the identity-owned second-factor port between sign-in and full session issuance: a confirmed enrollment turns a successful password sign-in into a pending authentication that only the MFA verification endpoint can upgrade. The user ID is the TypeID wire form.

type MailSender ¶

type MailSender interface {
	EnqueueEmail(ctx context.Context, msg mailer.Message) error
}

MailSender queues transactional email. Implemented by internal/jobs; declared here so identity features stay free of the job package.

type Module ¶

type Module struct {
	// contains filtered or unexported fields
}

Module is the identity surface: the user core plus each explicitly wired feature, mounted in construction order. There is no feature discovery or late registration.

func New(
	core APIFeature,
	account Feature,
	sessions APIFeature,
	groups Feature,
	claims Feature,
	passkeys APIFeature,
	devices APIFeature,
	onetime Feature,
	emailv Feature,
	signup Feature,
	apiaccess Feature,
	apikeys Feature,
	recovery APIFeature,
	totp Feature,
) *Module

func (m *Module) APIAccessRPCService() (string, http.Handler)

func (m *Module) APIKeyRPCService() (string, http.Handler)

func (m *Module) APIRoutes(r chi.Router, g RouteGroups)

func (m *Module) AccountRPCService() (string, http.Handler)

func (m *Module) CustomClaimRPCService() (string, http.Handler)

func (m *Module) DeviceApprovalRPCService() (string, http.Handler)

func (m *Module) EmailVerificationRPCService() (string, http.Handler)

func (m *Module) GroupRPCService() (string, http.Handler)

func (m *Module) MfaRPCService() (string, http.Handler)

func (m *Module) OneTimeAccessRPCService() (string, http.Handler)

func (m *Module) SignupRPCService() (string, http.Handler)

func (m *Module) UserRPCService(auth kernel.AccessAuthenticator) (string, http.Handler)

type Recorder ¶

type Recorder interface {
	Record(ctx context.Context, event AuditEvent, exec datastore.Executor)
}

Recorder receives audit events. A nil exec writes the audit row standalone (best effort); a non-nil exec joins the caller's transaction so the entry commits or rolls back with the domain write — the durable outbox boundary.

type RouteGroups ¶

type RouteGroups struct {
	Admin  kernel.Guard // session auth + admin requirement
	Self   kernel.Guard // session auth (cookie)
	APIKey kernel.Guard // X-API-KEY machine auth
}

RouteGroups carries the authentication middleware chains a feature applies at mount time; the composition root builds each chain once. A nil group leaves its guarded routes unmounted (fail closed). APIKey is the machine-credential chain: it resolves an X-API-KEY header into a principal for the admin RPC surface and passes requests without the header through to the bearer path.