Struct EmailOtpService 

pub struct EmailOtpService<S> { /* private fields */ }

Email OTP authentication — issues a short-lived one-time code (token) that the caller sends to the user’s email address.

Flow

1. issue(email) → raw token (send in email). Returns None for unknown emails. Rate-limited to [ISSUE_RATE_MAX] requests per email per 10-minute window.
2. verify(raw_token, ip) → session created, EmailOtpVerifyResponse returned.

Implementations

impl<S> EmailOtpService<S>

where S: UserRepository + SessionRepository + Clone + Send + Sync + 'static,

pub fn new(storage: S, events: EventBus, session_ttl_secs: i64) -> Self

pub async fn issue(&self, email: &str) -> Result<Option<String>>

Issue an OTP token for the given email. Returns None for unknown emails (avoids user enumeration). Rate-limited per email address.

pub async fn verify( &self, raw_token: &str, ip: &str, ) -> Result<EmailOtpVerifyResponse>

Consume the OTP token and create an authenticated session.