Delete Account (Plan #2): - DELETE /api/auth/account/ with password or "DELETE" confirmation - Cascade delete across 15+ tables in correct FK order - Auth provider detection (email/apple/google) for /auth/me/ - File cleanup after account deletion - Handler + repository tests (12 tests) Encryption at Rest (Plan #3): - AES-256-GCM envelope encryption (per-file DEK wrapped by KEK) - Encrypt on upload, auto-decrypt on serve via StorageService.ReadFile() - MediaHandler serves decrypted files via c.Blob() - TaskService email image loading uses ReadFile() - cmd/migrate-encrypt CLI tool with --dry-run for existing files - Encryption service + storage service tests (18 tests)
72 lines
2.7 KiB
Go
72 lines
2.7 KiB
Go
package requests
|
|
|
|
// LoginRequest represents the login request body
|
|
type LoginRequest struct {
|
|
Username string `json:"username" validate:"required_without=Email"`
|
|
Email string `json:"email" validate:"required_without=Username,omitempty,email"`
|
|
Password string `json:"password" validate:"required,min=1"`
|
|
}
|
|
|
|
// RegisterRequest represents the registration request body
|
|
type RegisterRequest struct {
|
|
Username string `json:"username" validate:"required,min=3,max=150"`
|
|
Email string `json:"email" validate:"required,email,max=254"`
|
|
Password string `json:"password" validate:"required,min=8"`
|
|
FirstName string `json:"first_name" validate:"max=150"`
|
|
LastName string `json:"last_name" validate:"max=150"`
|
|
}
|
|
|
|
// VerifyEmailRequest represents the email verification request body
|
|
type VerifyEmailRequest struct {
|
|
Code string `json:"code" validate:"required,len=6"`
|
|
}
|
|
|
|
// ForgotPasswordRequest represents the forgot password request body
|
|
type ForgotPasswordRequest struct {
|
|
Email string `json:"email" validate:"required,email"`
|
|
}
|
|
|
|
// VerifyResetCodeRequest represents the verify reset code request body
|
|
type VerifyResetCodeRequest struct {
|
|
Email string `json:"email" validate:"required,email"`
|
|
Code string `json:"code" validate:"required,len=6"`
|
|
}
|
|
|
|
// ResetPasswordRequest represents the reset password request body
|
|
type ResetPasswordRequest struct {
|
|
ResetToken string `json:"reset_token" validate:"required"`
|
|
NewPassword string `json:"new_password" validate:"required,min=8"`
|
|
}
|
|
|
|
// UpdateProfileRequest represents the profile update request body
|
|
type UpdateProfileRequest struct {
|
|
Email *string `json:"email" validate:"omitempty,email,max=254"`
|
|
FirstName *string `json:"first_name" validate:"omitempty,max=150"`
|
|
LastName *string `json:"last_name" validate:"omitempty,max=150"`
|
|
}
|
|
|
|
// ResendVerificationRequest represents the resend verification email request
|
|
type ResendVerificationRequest struct {
|
|
// No body needed - uses authenticated user's email
|
|
}
|
|
|
|
// AppleSignInRequest represents the Apple Sign In request body
|
|
type AppleSignInRequest struct {
|
|
IDToken string `json:"id_token" validate:"required"`
|
|
UserID string `json:"user_id" validate:"required"` // Apple's sub claim
|
|
Email *string `json:"email"` // May be nil or private relay
|
|
FirstName *string `json:"first_name"`
|
|
LastName *string `json:"last_name"`
|
|
}
|
|
|
|
// GoogleSignInRequest represents the Google Sign In request body
|
|
type GoogleSignInRequest struct {
|
|
IDToken string `json:"id_token" validate:"required"` // Google ID token from Credential Manager
|
|
}
|
|
|
|
// DeleteAccountRequest represents the delete account request body
|
|
type DeleteAccountRequest struct {
|
|
Password *string `json:"password"`
|
|
Confirmation *string `json:"confirmation"`
|
|
}
|