extaccount

type Account struct {
	ID           string     `json:"id"`
	Email        string     `json:"email"`
	Name         string     `json:"name"`
	Persona      string     `json:"persona"`
	ExpiresAt    *time.Time `json:"expires_at,omitempty"`
	SuspendedAt  *time.Time `json:"suspended_at,omitempty"`
	CreatedBy    string     `json:"created_by"`
	CreatedAt    time.Time  `json:"created_at"`
	LastSignInAt *time.Time `json:"last_sign_in_at,omitempty"`
	// ConvertedAt is when the person first signed in through the identity
	// provider, which closed the account.
	ConvertedAt *time.Time `json:"converted_at,omitempty"`
}

type Config struct {
	Store    Store
	Personas Personas
	// StoredPersona reads a persona from the persona store, which another
	// replica writes before this one's registry hears of it; nil reads the
	// registry alone. Create asks it, so an account can be created the moment
	// its persona is saved on any replica.
	StoredPersona func(ctx context.Context, name string) (*persona.Persona, bool)
	// Settings reads the stored configuration; nil uses Defaults.
	Settings func(ctx context.Context) Settings
	// KnownInternal reports whether an address already signs in through
	// the identity provider; nil knows none.
	KnownInternal func(ctx context.Context, email string) (bool, error)
	// Mail sends the links; nil sends none, and Create still stores the
	// account.
	Mail Mailer
	// RevokeShares revokes every share to an address, run when its account
	// is removed so no guest link reopens what was shared.
	RevokeShares func(ctx context.Context, email string) error
	// BaseURL is the portal's public origin a link is built on.
	BaseURL string
	// Cookie is the browser-session cookie a claimed link sets; its TTL is
	// replaced by the session setting.
	Cookie browsersession.CookieConfig
	// Now is the clock; nil is time.Now.
	Now func() time.Time
}

type Mailer func(ctx context.Context, to, name, link string, invitation bool, valid time.Duration) error

type NewAccount struct {
	Email     string     `json:"email"`
	Name      string     `json:"name"`
	Persona   string     `json:"persona"`
	ExpiresAt *time.Time `json:"expires_at,omitempty"`
}

type Personas interface {
	Get(name string) (*persona.Persona, bool)
	GetForRoles(roles []string) (*persona.Persona, bool)
}

type PostgresStore struct {
	// contains filtered or unexported fields
}

type Service struct {
	// contains filtered or unexported fields
}

type Settings struct {
	// SessionHours is how long a signed-in session lasts.
	SessionHours int `json:"session_hours" example:"12"`
	// InviteHours is how long the invitation email's link can be used.
	InviteHours int `json:"invite_hours" example:"168"`
	// LinkMinutes is how long a link asked for on the sign-in screen can be
	// used.
	LinkMinutes int `json:"link_minutes" example:"15"`
}

type Store interface {
	Insert(ctx context.Context, a Account) error
	Get(ctx context.Context, id string) (*Account, error)
	GetByEmail(ctx context.Context, email string) (*Account, error)
	List(ctx context.Context) ([]Account, error)
	SetExpiry(ctx context.Context, id string, expiresAt *time.Time) error
	SetSuspended(ctx context.Context, id string, at *time.Time) error
	Delete(ctx context.Context, id string) error
	// Convert closes the account for the address, if it has an open one,
	// and reports whether it did.
	Convert(ctx context.Context, email string, at time.Time) (bool, error)
	TouchSignIn(ctx context.Context, id string, at time.Time) error

	InsertLink(ctx context.Context, tokenHash, accountID string, expiresAt time.Time) error
	// ClaimLink marks an unclaimed, unexpired link claimed and returns its
	// account, in one statement so a link is claimed once on any replica.
	ClaimLink(ctx context.Context, tokenHash string, now time.Time) (string, bool, error)
	CountLinksSince(ctx context.Context, accountID string, since time.Time) (int, error)
}