Struct PasswordlessService 

pub struct PasswordlessService { /* private fields */ }

Orchestrates the passwordless flows. link_base is the front-end URL the magic-link token is appended to (e.g. https://app.example.com/auth/magic).

Implementations

impl PasswordlessService

pub fn new( users: Arc<dyn UserStore>, ott: Arc<OneTimeTokenService>, notifier: Arc<dyn Notifier>, identity: IdentityService, link_base: impl Into<String>, ) -> Self

pub fn with_send_limit( self, backend: Arc<dyn RateLimitBackend>, max: u32, window_secs: u32, ) -> Self

Enable per-destination send throttling: at most max sends per window_secs for any one address (fail-closed). Reuses the framework’s distributed rate-limit backend.

pub async fn start_magic_link( &self, tenant: Option<&str>, email: &str, ) -> Result<()>

Start a magic-link login: issue a token and email it as a link. Always returns Ok(()) even when the email is unknown, so the response cannot enumerate accounts.

pub async fn complete_magic_link(&self, token: &str) -> Result<TokenResponse>

Redeem a magic-link token → issue tokens.

pub async fn start_otp( &self, tenant: Option<&str>, destination: &str, channel: Channel, ) -> Result<()>

Start OTP login: send a numeric code over channel. Enumeration-safe.

pub async fn complete_otp(&self, code: &str) -> Result<TokenResponse>

Complete OTP login → issue tokens.