Struct AuthService 

pub struct AuthService<U, S, V, A, O, E>
where
    U: UserStore,
    S: SessionStore,
    V: VerificationStore,
    A: AccountStore,
    O: OAuthStateStore,
    E: EmailSender,
{
    pub config: AuthConfig,
    pub users: Arc<U>,
    pub sessions: Arc<S>,
    pub verifications: Arc<V>,
    pub accounts: Arc<A>,
    pub oauth_states: Arc<O>,
    pub email: Arc<E>,
    pub events: Arc<EventEmitter>,
}

Core authentication service. Generic over storage backends and email sender.

Fields

config: AuthConfig

Authentication configuration.

users: Arc<U>

User storage backend.

sessions: Arc<S>

Session storage backend.

verifications: Arc<V>

Verification token storage backend.

accounts: Arc<A>

OAuth account storage backend.

oauth_states: Arc<O>

OAuth state storage backend.

email: Arc<E>

Email sender implementation.

events: Arc<EventEmitter>

Event emitter for auth lifecycle hooks.

Implementations

impl<U, S, V, A, O, E> AuthService<U, S, V, A, O, E>

where U: UserStore, S: SessionStore, V: VerificationStore, A: AccountStore, O: OAuthStateStore, E: EmailSender,

pub fn new( config: AuthConfig, users: U, sessions: S, verifications: V, accounts: A, oauth_states: O, email: E, ) -> AuthService<U, S, V, A, O, E>

Create a new authentication service with the given configuration and backends.

pub fn with_events(self, events: EventEmitter) -> AuthService<U, S, V, A, O, E>

pub async fn signup( &self, input: NewUser, ip: Option<String>, user_agent: Option<String>, ) -> Result<SignupResult, AuthError>

Register a new user with email and password.

pub async fn login( &self, email: &str, password: &str, ip: Option<String>, user_agent: Option<String>, ) -> Result<LoginResult, AuthError>

Authenticate a user with email and password.

pub async fn logout(&self, session_id: i64) -> Result<(), AuthError>

Delete a single session by ID.

pub async fn logout_all(&self, user_id: i64) -> Result<(), AuthError>

Delete all sessions for a user.

pub async fn get_session( &self, raw_token: &str, ) -> Result<SessionResult, AuthError>

Retrieve a session and its associated user by raw token.

pub async fn list_sessions( &self, user_id: i64, ) -> Result<Vec<Session>, AuthError>

List all active sessions for a user.

pub async fn verify_email( &self, raw_token: &str, ip: Option<String>, user_agent: Option<String>, ) -> Result<VerifyEmailResult, AuthError>

Verify a user’s email address using a verification token.

pub async fn request_password_reset( &self, email: &str, ) -> Result<RequestResetResult, AuthError>

Request a password reset token for a user by email.

pub async fn reset_password( &self, raw_token: &str, new_password: &str, ) -> Result<ResetPasswordResult, AuthError>

Reset a user’s password using a reset token.

pub async fn cleanup_expired(&self) -> Result<(u64, u64, u64), AuthError>

Delete expired sessions, verification tokens, and OAuth states. Returns (sessions_deleted, verifications_deleted, oauth_states_deleted).

pub async fn oauth_callback( &self, info: OAuthUserInfo, tokens: OAuthTokens, ip: Option<String>, user_agent: Option<String>, ) -> Result<LoginResult, AuthError>

Handle OAuth callback - find or create user from OAuth info.

NOTE: OAuth state verification happens in the handler layer before calling this method. CSRF state and PKCE verifier are stored in the dedicated oauth_states table.

pub async fn list_accounts( &self, user_id: i64, ) -> Result<Vec<PublicAccount>, AuthError>

List all OAuth accounts for a user, with sensitive fields removed.

pub async fn link_account( &self, user_id: i64, info: OAuthUserInfo, tokens: OAuthTokens, ) -> Result<LinkAccountResult, AuthError>

Link an OAuth provider account to an existing authenticated user.

pub async fn unlink_account( &self, user_id: i64, account_id: i64, ) -> Result<UnlinkAccountResult, AuthError>

Unlink an OAuth provider account from a user.

pub async fn refresh_oauth_token( &self, user_id: i64, account_id: i64, provider_config: &OAuthProviderConfig, ) -> Result<RefreshTokenResult, AuthError>

Refresh an OAuth access token for a specific account.