1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
// SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
// SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
namespace Progmasoft.Progmaweb.Api.Accounts;
/// <summary>Body of <c>POST /api/v1/accounts/register</c>.</summary>
/// <remarks>
/// Every field is optional on the wire so that a missing value is reported as a validation error of that field
/// instead of a malformed request.
/// </remarks>
/// <param name="AccountName">Requested account name; see <see cref="AccountNamePolicy"/>.</param>
/// <param name="Email">Email address of the account; see <see cref="EmailAddressPolicy"/>.</param>
/// <param name="Password">Password in plain text; see <see cref="PasswordPolicy"/>. It is hashed before it is stored.</param>
/// <param name="AcceptPolicies">
/// Whether the person accepted the Privacy Policy and the Security Policy; anything but <see langword="true"/> is
/// refused. See <see cref="PolicyAcceptance"/>.
/// </param>
public sealed record RegisterAccountRequest(
string? AccountName,
string? Email,
string? Password,
bool? AcceptPolicies = null);
/// <summary>Body of <c>POST /api/v1/accounts/login</c>.</summary>
/// <param name="Email">Email address the account was registered with.</param>
/// <param name="Password">Password in plain text.</param>
public sealed record LoginAccountRequest(string? Email, string? Password);
/// <summary>Public view of an account, returned by the register, login and <c>/me</c> endpoints.</summary>
/// <param name="AccountName">Account name in its canonical spelling.</param>
/// <param name="Email">Email address as the owner entered it.</param>
/// <param name="CreatedAt">Moment the account was created, in UTC.</param>
public sealed record AccountResponse(string AccountName, string Email, DateTimeOffset CreatedAt);
/// <summary>An account together with the session that was just opened for it.</summary>
/// <param name="Account">The signed-in account.</param>
/// <param name="SessionToken">
/// Session token for the cookie. It exists only here and in the browser; the store keeps its digest.
/// </param>
/// <param name="ExpiresAt">Moment the session stops being valid, in UTC.</param>
internal sealed record AuthenticatedAccount(AccountRecord Account, string SessionToken, DateTimeOffset ExpiresAt);
/// <summary>Outcome of asking the store to create an account.</summary>
internal enum CreateAccountStatus
{
/// <summary>The account was stored.</summary>
Created,
/// <summary>Another account already has this name, compared without case.</summary>
AccountNameUnavailable,
/// <summary>Another account already has this email address, compared without case.</summary>
EmailUnavailable,
/// <summary>Another account is already linked to this Google identity.</summary>
GoogleSubjectUnavailable
}
/// <summary>Result of <see cref="IAccountStore.CreateAsync"/>.</summary>
/// <param name="Status">Whether the account was stored, and if not, which uniqueness rule refused it.</param>
/// <param name="Account">The stored account; <see langword="null"/> unless <paramref name="Status"/> is created.</param>
internal sealed record CreateAccountResult(CreateAccountStatus Status, AccountRecord? Account)
{
/// <summary>Creates the result of a stored account.</summary>
/// <param name="account">The account that was stored.</param>
/// <returns>A result with the created status and the account.</returns>
public static CreateAccountResult Created(AccountRecord account) => new(CreateAccountStatus.Created, account);
/// <summary>Creates the result of a refused account name.</summary>
/// <returns>A result without an account.</returns>
public static CreateAccountResult AccountNameUnavailable() => new(CreateAccountStatus.AccountNameUnavailable, null);
/// <summary>Creates the result of a refused email address.</summary>
/// <returns>A result without an account.</returns>
public static CreateAccountResult EmailUnavailable() => new(CreateAccountStatus.EmailUnavailable, null);
/// <summary>Creates the result of a refused Google identity.</summary>
/// <returns>A result without an account.</returns>
public static CreateAccountResult GoogleSubjectUnavailable() =>
new(CreateAccountStatus.GoogleSubjectUnavailable, null);
}
|