mirror of
https://github.com/Sea-Haven-Industries/shoc-backend.git
synced 2026-09-30 08:23:12 +00:00
c841e130be
Forgot Password answers every address the same way and emails a code only to an active account. Codes are stored as salted SHA-256 hashes, expire 15 minutes after issue, are replaced by a newer request, and are checked only against the email they were issued to. Five failed checks delete the code; attempts are reserved with one conditional UPDATE so concurrent guesses cannot exceed the budget. VerificationCode requires the email, and email and code are accepted in the JSON body so they stay out of URLs. The three anonymous endpoints are rate limited to 10 requests per 15 minutes per client IP. Forwarded headers are trusted only through loopback and private hops, since the API sits behind the EB load balancer and nginx. The migration adds hash, salt, expiry and attempt columns and deletes the old plaintext rows.
25 lines
1.2 KiB
C#
25 lines
1.2 KiB
C#
using Data.SeaHavenIndustries;
|
|
|
|
namespace SeaHaven.DataServices.Interfaces
|
|
{
|
|
public interface IForgetPasswordDataService
|
|
{
|
|
/// <summary>Deletes every pending code for the email, then stores the new one.</summary>
|
|
Task ReplaceCodeAsync(string email, string userId, string codeHash, string codeSalt, DateTime expiresAtUtc, CancellationToken cancellationToken);
|
|
|
|
/// <summary>Returns the pending code for exactly this email, or null.</summary>
|
|
Task<ForgetPasswordCode?> GetByEmailAsync(string email, CancellationToken cancellationToken);
|
|
|
|
/// <summary>
|
|
/// Atomically consumes one attempt when the code is unexpired and has fewer
|
|
/// than <paramref name="maxAttempts"/> consumed. Returns false otherwise.
|
|
/// </summary>
|
|
Task<bool> TryConsumeAttemptAsync(int id, int maxAttempts, DateTime nowUtc, CancellationToken cancellationToken);
|
|
|
|
/// <summary>Gives back an attempt consumed by a check that matched.</summary>
|
|
Task RefundAttemptAsync(int id, CancellationToken cancellationToken);
|
|
|
|
Task RemoveAsync(int id, CancellationToken cancellationToken);
|
|
Task RemoveByEmailAsync(string email, CancellationToken cancellationToken);
|
|
}
|
|
}
|