c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
87 lines
2.6 KiB
Go
87 lines
2.6 KiB
Go
// Copyright © 2023 Ory Corp
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package link
|
|
|
|
import (
|
|
"context"
|
|
"time"
|
|
|
|
"github.com/gofrs/uuid"
|
|
"github.com/pkg/errors"
|
|
|
|
"github.com/ory/kratos/identity"
|
|
"github.com/ory/kratos/selfservice/flow"
|
|
"github.com/ory/kratos/selfservice/flow/verification"
|
|
"github.com/ory/kratos/x"
|
|
"github.com/ory/x/clock"
|
|
"github.com/ory/x/randx"
|
|
)
|
|
|
|
type VerificationToken struct {
|
|
// ID represents the tokens's unique ID.
|
|
//
|
|
// required: true
|
|
// type: string
|
|
// format: uuid
|
|
ID uuid.UUID `json:"id" db:"id" faker:"-"`
|
|
|
|
// Token represents the verification token. It can not be longer than 64 chars!
|
|
Token string `json:"-" db:"token"`
|
|
|
|
// VerifiableAddress links this token to a verification address.
|
|
// required: true
|
|
VerifiableAddress *identity.VerifiableAddress `json:"verification_address" belongs_to:"identity_verifiable_addresses" fk_id:"identity_verifiable_address_id"`
|
|
|
|
// ExpiresAt is the time (UTC) when the token expires.
|
|
// required: true
|
|
ExpiresAt time.Time `json:"expires_at" faker:"time_type" db:"expires_at"`
|
|
|
|
// IssuedAt is the time (UTC) when the token was issued.
|
|
// required: true
|
|
IssuedAt time.Time `json:"issued_at" faker:"time_type" db:"issued_at"`
|
|
|
|
// CreatedAt is a helper struct field for gobuffalo.pop.
|
|
CreatedAt time.Time `json:"-" faker:"-" db:"created_at"`
|
|
// UpdatedAt is a helper struct field for gobuffalo.pop.
|
|
UpdatedAt time.Time `json:"-" faker:"-" db:"updated_at"`
|
|
// VerifiableAddressID is a helper struct field for gobuffalo.pop.
|
|
VerifiableAddressID uuid.NullUUID `json:"-" faker:"-" db:"identity_verifiable_address_id"`
|
|
// FlowID is a helper struct field for gobuffalo.pop.
|
|
FlowID uuid.UUID `json:"-" faker:"-" db:"selfservice_verification_flow_id"`
|
|
NID uuid.UUID `json:"-" faker:"-" db:"nid"`
|
|
}
|
|
|
|
func (VerificationToken) TableName(ctx context.Context) string {
|
|
return "identity_verification_tokens"
|
|
}
|
|
|
|
func NewSelfServiceVerificationToken(address identity.VerifiableAddressLike, f *verification.Flow, expiresIn time.Duration) *VerificationToken {
|
|
now := time.Now().UTC()
|
|
|
|
token := &VerificationToken{
|
|
ID: x.NewUUID(),
|
|
Token: randx.MustString(32, randx.AlphaNum),
|
|
ExpiresAt: now.Add(expiresIn),
|
|
IssuedAt: now,
|
|
FlowID: f.ID,
|
|
}
|
|
if address != nil {
|
|
if va, isPersistable := address.ToPersistable(); isPersistable {
|
|
token.VerifiableAddress = va
|
|
token.VerifiableAddressID = uuid.NullUUID{
|
|
UUID: va.ID,
|
|
Valid: true,
|
|
}
|
|
}
|
|
}
|
|
return token
|
|
}
|
|
|
|
func (f *VerificationToken) Valid(c clock.Clock) error {
|
|
if f.ExpiresAt.Before(c.Now().UTC()) {
|
|
return errors.WithStack(flow.NewFlowExpiredError(c, f.ExpiresAt))
|
|
}
|
|
return nil
|
|
}
|