Struct OneTimeTokenService 

pub struct OneTimeTokenService { /* private fields */ }

Issues and redeems one-time tokens over an OttStore.

Implementations

impl OneTimeTokenService

pub fn new(store: Arc<dyn OttStore>) -> Self

pub async fn issue( &self, user_id: &str, purpose: OttPurpose, ttl_secs: u64, ) -> Result<String>

Issue a high-entropy URL-safe token for user_id valid for ttl_secs. Returns the plaintext token — deliver it, do not store it.

pub async fn issue_numeric( &self, user_id: &str, purpose: OttPurpose, digits: u32, ttl_secs: u64, ) -> Result<String>

Issue a short numeric OTP (e.g. 6 digits) for SMS/email second-channel login. Same single-use + TTL guarantees as issue.

pub async fn consume(&self, token: &str, purpose: OttPurpose) -> Result<String>

Redeem token for purpose. On success returns the user_id it was issued to. Fails closed on expiry, wrong purpose, reuse, or forgery.