feat: add im auth verification flows

server/store/store.go

@@ -1449,6 +1449,100 @@ type pcacheMapper struct{}
 
 var PCache PersistentCacheInterface
 
+// VerificationPersistenceInterface defines storage for product verification challenges.
+type VerificationPersistenceInterface interface {
+	Create(tenantID types.TenantID, vc *types.VerificationCode) error
+	Get(tenantID types.TenantID, challengeID string) (*types.VerificationCode, error)
+	GetActive(tenantID types.TenantID, scene, phoneHash string, now time.Time) (*types.VerificationCode, error)
+	Fail(tenantID types.TenantID, challengeID string, state types.VerificationState) error
+	MarkVerified(tenantID types.TenantID, challengeID, tokenHash string, verifiedAt time.Time) error
+	Consume(tenantID types.TenantID, challengeID, tokenHash string, consumedAt time.Time) error
+}
+
+type verificationMapper struct{}
+
+// Verifications is a singleton for product verification challenges.
+var Verifications VerificationPersistenceInterface
+
+// UserSecurityPersistenceInterface defines user security state used to
+// invalidate previously issued login tokens.
+type UserSecurityPersistenceInterface interface {
+	GetAuthVersion(tenantID types.TenantID, uid types.Uid) (int, error)
+	BumpAuthVersion(tenantID types.TenantID, uid types.Uid, updatedAt time.Time) (int, error)
+}
+
+type userSecurityMapper struct{}
+
+// Security is a singleton for user security metadata.
+var Security UserSecurityPersistenceInterface
+
+func (userSecurityMapper) GetAuthVersion(tenantID types.TenantID, uid types.Uid) (int, error) {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return 0, err
+	}
+	return tenantAdp.TenantUserSecurityGetAuthVersion(tenantID, uid)
+}
+
+func (userSecurityMapper) BumpAuthVersion(tenantID types.TenantID, uid types.Uid, updatedAt time.Time) (int, error) {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return 0, err
+	}
+	return tenantAdp.TenantUserSecurityBumpAuthVersion(tenantID, uid, updatedAt)
+}
+
+func (verificationMapper) Create(tenantID types.TenantID, vc *types.VerificationCode) error {
+	if vc == nil || vc.TenantID != tenantID {
+		return types.ErrMalformed
+	}
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return err
+	}
+	return tenantAdp.TenantVerificationCreate(tenantID, vc)
+}
+
+func (verificationMapper) Get(tenantID types.TenantID, challengeID string) (*types.VerificationCode, error) {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return nil, err
+	}
+	return tenantAdp.TenantVerificationGet(tenantID, challengeID)
+}
+
+func (verificationMapper) GetActive(tenantID types.TenantID, scene, phoneHash string, now time.Time) (*types.VerificationCode, error) {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return nil, err
+	}
+	return tenantAdp.TenantVerificationGetActive(tenantID, scene, phoneHash, now)
+}
+
+func (verificationMapper) Fail(tenantID types.TenantID, challengeID string, state types.VerificationState) error {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return err
+	}
+	return tenantAdp.TenantVerificationFail(tenantID, challengeID, state)
+}
+
+func (verificationMapper) MarkVerified(tenantID types.TenantID, challengeID, tokenHash string, verifiedAt time.Time) error {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return err
+	}
+	return tenantAdp.TenantVerificationMarkVerified(tenantID, challengeID, tokenHash, verifiedAt)
+}
+
+func (verificationMapper) Consume(tenantID types.TenantID, challengeID, tokenHash string, consumedAt time.Time) error {
+	tenantAdp, err := tenantBusinessAdapter(tenantID)
+	if err != nil {
+		return err
+	}
+	return tenantAdp.TenantVerificationConsume(tenantID, challengeID, tokenHash, consumedAt)
+}
+
 // Get reads a persistent cache entry.
 func (pcacheMapper) Get(tenantID types.TenantID, key string) (string, error) {
 	tenantAdp, err := tenantBusinessAdapter(tenantID)
@@ -1499,4 +1593,6 @@ func init() {
 	Devices = deviceMapper{}
 	Files = fileMapper{}
 	PCache = pcacheMapper{}
+	Verifications = verificationMapper{}
+	Security = userSecurityMapper{}
 }