1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
|
// SPDX-FileCopyrightText: 2026 Progmasoft <support@progmasoft.com>
// SPDX-License-Identifier: AGPL-3.0-or-later WITH AdditionRef-Progmasoft-Patent-Grant-1.1
namespace Progmasoft.Progmaweb.Api.Accounts;
/// <summary>An account as the store keeps it.</summary>
/// <param name="Id">Stable identifier; sessions refer to the account by it.</param>
/// <param name="AccountName">Account name in its canonical spelling, as shown and used in URLs.</param>
/// <param name="NormalizedAccountName">Upper-case form of the name; the uniqueness key.</param>
/// <param name="Email">Email address as the owner entered it.</param>
/// <param name="NormalizedEmail">Upper-case form of the address; the uniqueness key.</param>
/// <param name="GoogleSubject">
/// Subject identifier of the linked Google identity; <see langword="null"/> for a password account.
/// </param>
/// <param name="PasswordHash">
/// ASP.NET Core Identity password hash; <see langword="null"/> for an account that signs in through Google only.
/// </param>
/// <param name="CreatedAt">Moment the account was created, in UTC.</param>
/// <param name="PoliciesVersion">
/// Version of the policies the owner accepted, <see cref="PolicyAcceptance.CurrentVersion"/> at the time;
/// <see langword="null"/> for an account created before registration asked for it, or by operations tooling.
/// </param>
/// <param name="PoliciesAcceptedAt">Moment the owner accepted them, in UTC; null when the version is.</param>
internal sealed record AccountRecord(
Guid Id,
string AccountName,
string NormalizedAccountName,
string Email,
string NormalizedEmail,
string? GoogleSubject,
string? PasswordHash,
DateTimeOffset CreatedAt,
string? PoliciesVersion = null,
DateTimeOffset? PoliciesAcceptedAt = null);
/// <summary>A session as the store keeps it.</summary>
/// <param name="TokenDigest">SHA-256 digest of the session token. The token itself is never stored.</param>
/// <param name="AccountId">Identifier of the account the session belongs to.</param>
/// <param name="CreatedAt">Moment the session was opened, in UTC.</param>
/// <param name="ExpiresAt">Moment the session stops being valid, in UTC.</param>
internal sealed record SessionRecord(
byte[] TokenDigest,
Guid AccountId,
DateTimeOffset CreatedAt,
DateTimeOffset ExpiresAt);
|