service

type EmailSender interface {
	Send(ctx context.Context, recipient, subject, body string) error
}

type Options struct {
	SigningKey string

	// TokenTTL is the lifetime for issued access JWTs. If zero,
	// DefaultTokenTTL is used.
	TokenTTL time.Duration

	// EmailActivationEnabled gates account activation behind an email
	// confirmation step. When false (the default), users are activated
	// on creation; the email may still be confirmed via a separate
	// flow added later. When true, registration leaves the user
	// pending until they exchange an activation token sent via the
	// configured EmailSender, and login is refused for pending users.
	EmailActivationEnabled bool

	// EmailSender delivers transactional mail. The email module's
	// *email.Handler satisfies this interface. When
	// EmailActivationEnabled is true and EmailSender is nil, the user
	// module fails to start so the misconfiguration is loud.
	EmailSender EmailSender

	// ActivationURLFormat is a Sprintf-style template that the user
	// module substitutes the activation token into when composing the
	// activation email. Example:
	//   "https://example.com/activate?token=%s"
	// When empty, the activation email contains the bare token and the
	// caller is expected to provide UX instructions out-of-band.
	ActivationURLFormat string

	// ActivationSubject overrides the subject line of activation
	// emails. When empty, DefaultActivationSubject is used.
	ActivationSubject string
}

type UserModule struct {
	platform.UnimplementedModule
	// contains filtered or unexported fields
}