identity

type APIFeature ¶

type APIFeature interface {
	Feature
	APIRoutes(r chi.Router, g RouteGroups)
}

APIFeature mounts endpoints inside the shared /api group.

type AuditEvent ¶

type AuditEvent struct {
	Action string
	Actor  string
	Target string
}

type Feature ¶

type Feature interface {
	Name() string
}

Feature is one mounted unit inside the identity surface: a feature left out of New has no routes.

type MFAPendingIssuer ¶

type MFAPendingIssuer interface {
	// RequiresPending reports whether the account must pass the
	// second factor before a full session.
	RequiresPending(ctx context.Context, userID string) (bool, error)
	// CreatePending mints the short-lived pending bridge and returns
	// its raw token (for the pending cookie only).
	CreatePending(ctx context.Context, userID string) (string, error)
	// ClearPending drops the bridge (sign-out).
	ClearPending(ctx context.Context, userID string) error
}

MFAPendingIssuer is the identity-owned second-factor port between sign-in and full session issuance: a confirmed enrollment turns a successful password sign-in into a pending authentication that only the MFA verification endpoint can upgrade. The user ID is the TypeID wire form.

type MailSender ¶

type MailSender interface {
	EnqueueEmail(ctx context.Context, msg mailer.Message) error
}

MailSender queues transactional email. Implemented by internal/jobs; declared here so identity features stay free of the job package.

type Module ¶

type Module struct {
	// contains filtered or unexported fields
}

Module is the identity surface: the user core plus each explicitly wired feature, mounted in construction order. There is no feature discovery or late registration.

func New(
	core APIFeature,
	account APIFeature,
	sessions APIFeature,
	groups APIFeature,
	claims APIFeature,
	passkeys APIFeature,
	devices APIFeature,
	onetime APIFeature,
	emailv APIFeature,
	signup APIFeature,
	apiaccess APIFeature,
	apikeys APIFeature,
	recovery APIFeature,
	totp APIFeature,
) *Module

func (m *Module) APIRoutes(r chi.Router, g RouteGroups)

type Recorder ¶

type Recorder interface {
	Record(ctx context.Context, event AuditEvent, exec datastore.Executor)
}

Recorder receives audit events. A nil exec writes the audit row standalone (best effort); a non-nil exec joins the caller's transaction so the entry commits or rolls back with the domain write — the durable outbox boundary.

type RouteGroups ¶

type RouteGroups struct {
	Admin  kernel.Guard // session auth + admin requirement
	Self   kernel.Guard // session auth (cookie)
	APIKey kernel.Guard // API-key auth
}

RouteGroups carries the authentication middleware chains a feature applies at mount time; the composition root builds each chain once. A nil group leaves its guarded routes unmounted (fail closed).