Struct PasswordResetService 

pub struct PasswordResetService<S> { /* private fields */ }

Password reset service.

Flow

1. App calls request_reset(email) → gets a raw token (send it in the reset email yourself — authx does not send email).
2. User clicks link → app calls reset_password(token, new_password).

Tokens expire after ttl (default 30 minutes) and are single-use.

Implementations

impl<S> PasswordResetService<S>

where S: UserRepository + CredentialRepository + Clone + Send + Sync + 'static,

pub fn new(storage: S, events: EventBus) -> Self

pub fn with_ttl(self, ttl: Duration) -> Self

pub async fn request_reset(&self, email: &str) -> Result<Option<String>>

Issue a reset token for the given email.

Always succeeds (even for unknown emails) to avoid user enumeration. Returns None if the email is not registered — caller should silently ignore and not reveal this to the client.

pub async fn reset_password(&self, req: PasswordResetRequest) -> Result<()>

Consume the reset token and update the password.