Struct PasswordAuth 

pub struct PasswordAuth<'a, R: RepositoryProvider> { /* private fields */ }

Namespaced authentication providers for clean API organization

These structs provide focused interfaces for specific authentication methods while maintaining access to the underlying Torii functionality. Password-based authentication provider

Provides methods for password registration, login, password changes, and password resets.

Implementations

impl<R: RepositoryProvider> PasswordAuth<'_, R>

Implementation of password-based authentication methods

pub async fn register( &self, email: &str, password: &str, ) -> Result<User, ToriiError>

Register a user with a password

Arguments

• email: The email of the user to register
• password: The password of the user to register

Returns

Returns the registered user

pub async fn register_with_name( &self, email: &str, password: &str, name: Option<&str>, ) -> Result<User, ToriiError>

Register a user with a password and optional name

Arguments

• email: The email of the user to register
• password: The password of the user to register
• name: Optional name for the user

Returns

Returns the registered user

pub async fn authenticate( &self, email: &str, password: &str, user_agent: Option<String>, ip_address: Option<String>, ) -> Result<(User, Session), ToriiError>

Authenticate a user with email and password

Arguments

• email: The email of the user to authenticate
• password: The password of the user to authenticate
• user_agent: Optional user agent to associate with the session
• ip_address: Optional IP address to associate with the session

Returns

Returns the user and session if authentication is successful

pub async fn change_password( &self, user_id: &UserId, old_password: &str, new_password: &str, ) -> Result<(), ToriiError>

Change a user’s password and invalidate all existing sessions

This method changes the user’s password after verifying the old password is correct. For security reasons, it also invalidates all existing sessions for the user, requiring them to log in again with the new password.

Arguments

• user_id: The ID of the user to change the password for
• old_password: The current password for verification
• new_password: The new password to set for the user

pub async fn reset_password_initiate( &self, email: &str, reset_url_base: &str, ) -> Result<(), ToriiError>

Request a password reset for the given email address

This will generate a secure reset token and send a password reset email if mailer is configured. For security reasons, this method doesn’t reveal whether the email exists or not.

Arguments

• email: The email address to send the password reset to
• reset_url_base: The base URL for the password reset form (e.g., “https://yourapp.com/reset”)

Returns

Always returns Ok() to prevent email enumeration attacks

pub async fn reset_password_initiate_with_expiration( &self, email: &str, reset_url_base: &str, expires_in: Duration, ) -> Result<(), ToriiError>

Request a password reset with custom expiration time

Arguments

• email: The email address to send the password reset to
• reset_url_base: The base URL for the password reset form
• expires_in: How long the reset token should be valid

pub async fn reset_password_verify_token( &self, token: &str, ) -> Result<bool, ToriiError>

Verify a password reset token without consuming it

This is useful for frontend validation before showing the password reset form.

Arguments

• token: The reset token to verify

Returns

Returns true if the token is valid and not expired

pub async fn reset_password_complete( &self, token: &str, new_password: &str, ) -> Result<User, ToriiError>

Complete the password reset process and invalidate all user sessions

This will:

1. Verify and consume the reset token
2. Update the user’s password
3. Invalidate all existing sessions for security
4. Send a password changed notification email if mailer is configured

Arguments

• token: The reset token received via email
• new_password: The new password to set

Returns

Returns the user whose password was reset