7 7583dd64 2022-04-13 o // User represents a mailmux user.
8 5e70998a 2022-04-12 o type User struct {
9 7583dd64 2022-04-13 o // The name should be a valid email address.
11 5e70998a 2022-04-12 o password Password
14 5e70998a 2022-04-12 o type Password []byte
16 5e70998a 2022-04-12 o // A UserStore provides storage and authentication of users.
17 5e70998a 2022-04-12 o type UserStore interface {
18 5e70998a 2022-04-12 o // Change creates or updates the named user with the new password.
19 5e70998a 2022-04-12 o Change(name string, new Password) error
20 5e70998a 2022-04-12 o // Lookup returns the User with name.
21 5e70998a 2022-04-12 o // The error should be ErrUnknownUser if the user is not found.
22 5e70998a 2022-04-12 o Lookup(name string) (User, error)
23 5e70998a 2022-04-12 o // Delete removes the user from the store.
24 5e70998a 2022-04-12 o Delete(name string) error
25 c7ecbae7 2022-04-13 o // Authenticate authenticates the user identified by username with pw.
26 c7ecbae7 2022-04-13 o // error is non-nil if the password is incorrect or on any other error.
27 c7ecbae7 2022-04-13 o Authenticate(username string, pw Password) error
30 5e70998a 2022-04-12 o type ticket []byte
32 5e70998a 2022-04-12 o var testTicket = []byte(`TEST NOT REAL`)
35 c7ecbae7 2022-04-13 o ErrUserExist = errors.New("user already exists")
36 5e70998a 2022-04-12 o ErrUnknownUser = errors.New("unknown user")
39 5e70998a 2022-04-12 o // verified checks whether ownership of username's address has
40 5e70998a 2022-04-12 o // been confirmed.
41 5e70998a 2022-04-12 o // func (store *astore) verified(username string) (bool, error) {
42 5e70998a 2022-04-12 o // _, err := store.Lookup(username)
43 5e70998a 2022-04-12 o // if errors.Is(err, ErrUnknownUser) {
44 5e70998a 2022-04-12 o // return false, err
47 5e70998a 2022-04-12 o // _, err = os.Stat(path.Join(store.confirmDir, username))
48 5e70998a 2022-04-12 o // if err == nil {
49 5e70998a 2022-04-12 o // return false, nil
51 5e70998a 2022-04-12 o // if errors.Is(err, fs.ErrNotExist) {
52 5e70998a 2022-04-12 o // return true, nil
54 5e70998a 2022-04-12 o // return false, fmt.Errorf("check confirm file: %w", err)
57 5e70998a 2022-04-12 o // verify attempts to verify the username using the given token.
58 5e70998a 2022-04-12 o // func (store *astore) verify(username string, tok token) error {
59 5e70998a 2022-04-12 o // f, err := os.Open(path.Join(store.confirmDir, username))
60 5e70998a 2022-04-12 o // if errors.Is(err, fs.ErrNotExist) {
61 5e70998a 2022-04-12 o // return ErrUnknownUser
62 5e70998a 2022-04-12 o // } else if err != nil {
65 5e70998a 2022-04-12 o // defer f.Close()
66 5e70998a 2022-04-12 o // b, err := io.ReadAll(f)
67 5e70998a 2022-04-12 o // if err != nil {
70 5e70998a 2022-04-12 o // if bytes.Equal(b, []byte(tok)) {
71 5e70998a 2022-04-12 o // return os.Remove(path.Join(store.confirmDir, username))
73 5e70998a 2022-04-12 o // return errors.New("mismatched token")
76 5e70998a 2022-04-12 o func SendConfirmationMail(from, to string, tik ticket) error {
80 5e70998a 2022-04-12 o // Subject: Confirm address ownership
82 5e70998a 2022-04-12 o // Thanks for signing up to mailmux.net!
83 5e70998a 2022-04-12 o // Confirm ownership of $address by accessing the following link:
84 5e70998a 2022-04-12 o // https://mailmux.net/confirm?username=test@example.com&token=abcd12345
85 5e70998a 2022-04-12 o // Alternatively, go to https://mailmux.net/confirm
86 5e70998a 2022-04-12 o // enter your email address and your token:
89 5e70998a 2022-04-12 o // If you have not signed up for mailmux.net, please
90 5e70998a 2022-04-12 o // let us know by forwarding this mail to abuse@mailmux.net.
91 5e70998a 2022-04-12 o // Thank you for helping us fight spam!
